Solved

detect dns server

Posted on 2013-01-06
2
308 Views
Last Modified: 2013-01-10
sounds like a strange question, but is there a way to detect all dns servers on our internal network?
0
Comment
Question by:al4629740
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 9

Accepted Solution

by:
gt2847c earned 400 total points
ID: 38749548
Several possible ways to discover active servers, not necessarily all of them (especially if someone is attempting to conceal them)...

Cisco and other enterprise class network equipment support netflow collection.  Using netflow data you can look for traffic on TCP and UDP port 53.  Any internal network address answering traffic on 53 will likely be a DNS server or doing something it isn't supposed to which is still interesting.

Placing a sniffer (Wireshark, TCPDump, etc) in a central network traffic location and mirroring traffic to it can also be used to scan for the same traffic as above.

Actively scanning for systems answering on TCP and/or UDP 53.  NMAP is a free port scan utility that can do this.  There are plenty of commercial offerings as well.  Anything listening (and answering) on 53 is either a DNS server or again doing something it probably shouldn't be...
0
 
LVL 23

Assisted Solution

by:Suliman Abu Kharroub
Suliman Abu Kharroub earned 100 total points
ID: 38752878
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question