in

eEye Digital Security

The endpoint to vulnerability starts here.

 
eEye Digital Security » Blink Forums » Troubleshooting » GRC's DNSB

GRC's DNSB

Last post 10-09-2009 3:44 PM by Blue1978. 8 replies.
Page 1 of 1 (9 items)
Sort Posts: Previous Next

  • 10-01-2009 5:38 PM

    • lwbone
    • Top 200 Contributor
    • Joined on 09-09-2008
    • Posts 4

    GRC's DNSB

    Reply Contact 
    Louis...

    > Whatever you did .... my results are horrible!!  EEye Security
    > (BLINK.EXE) screams from the onset about each IP not conforming
    > to DNS Standards. Attached is the screen shot

    Thanks for sending all that stuff to me via eMail at DNS2009.

    I've examined the BLINK logs you sent ... and it simply appears 
    that BLINK is completely unaware of DNS security.  Is there some 
    way to make the benchmark an exception to allow those packets 
    back in to it ... or to briefly disable BLINK's detection while 
    running the benchmark??

    -- 
    ________________________________________________________________
    Steve.  Working on: GRC's DNS Benchmark utility:
            http://www.grc.com/dev/DNSBench.exe



    BLINK:  I hope that your techies are following the developments over at Gibson Research Corp. (GRC)
     
    I Love this product, but as can be seen from the above BLINK needs some updating (or I need some help)
    or both...  either way.
    Help us make BLINK a better product.

    LW BONE
    Filed under:

  • 10-01-2009 7:11 PM In reply to

    Re: GRC's DNSB

    DNS Benchmark #1.png
    Reply Contact

    What version of Blink are you using that your experiencing these issues with?

    Can you post one of the DNS alerts from Blink's log in this post?

    You can also right click on the alert in Blink's log and select "Go to rule".  Once you get to the rule, you can remove the checkmark in the box next to the rule, which will temporarily disable it.

    I went ahead and ran the DNSBenchmark test myself from my system (Vista 64bit running Blink Server Edition 4.4.2) and I did not have any issues.  Maybe I don't completely understand your issue.  Below I included some screenshots.

    (If your having issues viewing the images, you can click on them to make them larger and clearer)

  • 10-01-2009 7:25 PM In reply to

    Re: GRC's DNSB

    DNS Benchmark #2.png
    Reply Contact

    Tabular Data Tab

     

  • 10-01-2009 7:26 PM In reply to

    Re: GRC's DNSB

    DNS Benchmark #3.png
    Reply Contact

    Conclusions Tab:

     

  • 10-01-2009 9:09 PM In reply to

    Re: GRC's DNSB

    screenshot.1.jpg
    Reply Contact

         Alright I ran the test again, except this time, it was on a shared office computer running Blink Personal Edition 4.4.2.  This computer is on the same network that my personal computer was on when I ran the test the first time.

         See the screenshot below, is this the DNS alert your seeing?

    (If your having a hard time seeing the image, you can click on it to make it larger.)

     


  • 10-04-2009 1:58 PM In reply to

    • lwbone
    • Top 200 Contributor
    • Joined on 09-09-2008
    • Posts 4

    Re: GRC's DNSB

    Reply Contact

    Blink Personal Version 4.4.2,
    Rule version 1543 AntiVirus Version 1.0.790

    Vulnerability Scanner version 5.10.15,
    Audits version 2143
    Subscription will expire on 8/10/2010

    Vista Home Premium SP2.

    Below, find a copy of the blink logs sent to GRC for examination

    GRC's DNSB has a flag to use DNSSEC to validate the records being reported. perhaps if you re-run your test uising the commandline /DNSSEC you may see the results that GRC interpreted as BLINK not being DNS Security aware..

     

    Thanks for your response!

    TIME EVENT_ID CATEGORY NAME DESCRIPTION APPLICATION VERSION SEVERITY SUBJECT KEY_VALUES
    9/30/2009 16:32 BLINK-SFW-13 Firewall System wide firewall-IP 192.168.0.103->224.0.0.252 Firewall has Denied access Blink 4.4.2 0
    		Alert=No;Protocol=IP;Protocol=IP (Protocol=2);Local IP=192.168.0.103;Remote IP=224.0.0.252;Request=Denied;
    9/30/2009 16:32 BLINK-SFW-13 Firewall System wide firewall-IP 192.168.0.103->224.0.0.252 Firewall has Denied access Blink 4.4.2 0
    		Alert=No;Protocol=IP;Protocol=IP (Protocol=2);Local IP=192.168.0.103;Remote IP=224.0.0.252;Request=Denied;
    9/30/2009 16:32 BLINK-SFW-13 Firewall System wide firewall-IP 192.168.0.103->239.255.255.250 Firewall has Denied access Blink 4.4.2 0
    		Alert=No;Protocol=IP;Protocol=IP (Protocol=2);Local IP=192.168.0.103;Remote IP=239.255.255.250;Request=Denied;
    9/30/2009 16:32 BLINK-SFW-13 Firewall System wide firewall-IP 192.168.0.103->239.255.255.250 Firewall has Denied access Blink 4.4.2 0
    		Alert=No;Protocol=IP;Protocol=IP (Protocol=2);Local IP=192.168.0.103;Remote IP=239.255.255.250;Request=Denied;
    9/30/2009 16:28 BLINK-SFW-13 Firewall System wide firewall-IP 192.168.0.103->224.0.0.252 Firewall has Denied access Blink 4.4.2 0
    		Alert=No;Protocol=IP;Protocol=IP (Protocol=2);Local IP=192.168.0.103;Remote IP=224.0.0.252;Request=Denied;
    9/30/2009 16:28 BLINK-SFW-13 Firewall System wide firewall-IP 192.168.0.103->224.0.0.252 Firewall has Denied access Blink 4.4.2 0
    		Alert=No;Protocol=IP;Protocol=IP (Protocol=2);Local IP=192.168.0.103;Remote IP=224.0.0.252;Request=Denied;
    9/30/2009 16:28 BLINK-SFW-13 Firewall System wide firewall-IP 192.168.0.103->239.255.255.250 Firewall has Denied access Blink 4.4.2 0
    		Alert=No;Protocol=IP;Protocol=IP (Protocol=2);Local IP=192.168.0.103;Remote IP=239.255.255.250;Request=Denied;
    9/30/2009 16:28 BLINK-SFW-13 Firewall System wide firewall-IP 192.168.0.103->239.255.255.250 Firewall has Denied access Blink 4.4.2 0
    		Alert=No;Protocol=IP;Protocol=IP (Protocol=2);Local IP=192.168.0.103;Remote IP=239.255.255.250;Request=Denied;
    9/30/2009 16:26 BLINK-SFW-13 Firewall System wide firewall-IP 192.168.0.103->224.0.0.252 Firewall has Denied access Blink 4.4.2 0
    		Alert=No;Protocol=IP;Protocol=IP (Protocol=2);Local IP=192.168.0.103;Remote IP=224.0.0.252;Request=Denied;
    9/30/2009 16:26 BLINK-SFW-13 Firewall System wide firewall-IP 192.168.0.103->224.0.0.252 Firewall has Denied access Blink 4.4.2 0
    		Alert=No;Protocol=IP;Protocol=IP (Protocol=2);Local IP=192.168.0.103;Remote IP=224.0.0.252;Request=Denied;
    9/30/2009 16:26 BLINK-SFW-13 Firewall System wide firewall-IP 192.168.0.103->239.255.255.250 Firewall has Denied access Blink 4.4.2 0
    		Alert=No;Protocol=IP;Protocol=IP (Protocol=2);Local IP=192.168.0.103;Remote IP=239.255.255.250;Request=Denied;
    9/30/2009 16:26 BLINK-SFW-13 Firewall System wide firewall-IP 192.168.0.103->239.255.255.250 Firewall has Denied access Blink 4.4.2 0
    		Alert=No;Protocol=IP;Protocol=IP (Protocol=2);Local IP=192.168.0.103;Remote IP=239.255.255.250;Request=Denied;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.64.154 Alert=Yes;Action=Dropped;Attacker=68.87.64.154;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.2 Alert=Yes;Action=Dropped;Attacker=4.2.2.2;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 69.56.222.10 Alert=Yes;Action=Dropped;Attacker=69.56.222.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 129.250.35.251 Alert=Yes;Action=Dropped;Attacker=129.250.35.251;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.69.154 Alert=Yes;Action=Dropped;Attacker=68.87.69.154;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.68.170 Alert=Yes;Action=Dropped;Attacker=68.87.68.170;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 64.102.255.44 Alert=Yes;Action=Dropped;Attacker=64.102.255.44;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.5 Alert=Yes;Action=Dropped;Attacker=4.2.2.5;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 66.207.199.44 Alert=Yes;Action=Dropped;Attacker=66.207.199.44;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 216.185.111.10 Alert=Yes;Action=Dropped;Attacker=216.185.111.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 67.19.1.10 Alert=Yes;Action=Dropped;Attacker=67.19.1.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 67.19.0.10 Alert=Yes;Action=Dropped;Attacker=67.19.0.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.3 Alert=Yes;Action=Dropped;Attacker=4.2.2.3;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 129.250.35.250 Alert=Yes;Action=Dropped;Attacker=129.250.35.250;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.6 Alert=Yes;Action=Dropped;Attacker=4.2.2.6;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.1 Alert=Yes;Action=Dropped;Attacker=4.2.2.1;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.4 Alert=Yes;Action=Dropped;Attacker=4.2.2.4;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.5 Alert=Yes;Event Count=8;Action=Dropped;Attacker=4.2.2.5;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.6 Alert=Yes;Event Count=8;Action=Dropped;Attacker=4.2.2.6;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 216.185.111.10 Alert=Yes;Event Count=9;Action=Dropped;Attacker=216.185.111.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.3 Alert=Yes;Event Count=8;Action=Dropped;Attacker=4.2.2.3;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.1 Alert=Yes;Event Count=8;Action=Dropped;Attacker=4.2.2.1;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 129.250.35.251 Alert=Yes;Event Count=9;Action=Dropped;Attacker=129.250.35.251;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.68.170 Alert=Yes;Event Count=9;Action=Dropped;Attacker=68.87.68.170;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 129.250.35.250 Alert=Yes;Event Count=9;Action=Dropped;Attacker=129.250.35.250;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.64.154 Alert=Yes;Event Count=9;Action=Dropped;Attacker=68.87.64.154;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 64.102.255.44 Alert=Yes;Event Count=9;Action=Dropped;Attacker=64.102.255.44;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.2 Alert=Yes;Event Count=9;Action=Dropped;Attacker=4.2.2.2;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.4 Alert=Yes;Event Count=9;Action=Dropped;Attacker=4.2.2.4;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 69.56.222.10 Alert=Yes;Event Count=9;Action=Dropped;Attacker=69.56.222.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.69.154 Alert=Yes;Event Count=9;Action=Dropped;Attacker=68.87.69.154;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 66.207.199.44 Alert=Yes;Event Count=9;Action=Dropped;Attacker=66.207.199.44;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 67.19.1.10 Alert=Yes;Event Count=9;Action=Dropped;Attacker=67.19.1.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:12 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 67.19.0.10 Alert=Yes;Event Count=9;Action=Dropped;Attacker=67.19.0.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.5 Alert=Yes;Action=Dropped;Attacker=4.2.2.5;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.6 Alert=Yes;Action=Dropped;Attacker=4.2.2.6;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 216.185.111.10 Alert=Yes;Action=Dropped;Attacker=216.185.111.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.3 Alert=Yes;Action=Dropped;Attacker=4.2.2.3;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.1 Alert=Yes;Action=Dropped;Attacker=4.2.2.1;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.68.170 Alert=Yes;Action=Dropped;Attacker=68.87.68.170;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 129.250.35.251 Alert=Yes;Action=Dropped;Attacker=129.250.35.251;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 129.250.35.250 Alert=Yes;Action=Dropped;Attacker=129.250.35.250;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 64.102.255.44 Alert=Yes;Action=Dropped;Attacker=64.102.255.44;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.64.154 Alert=Yes;Event Count=11;Action=Dropped;Attacker=68.87.64.154;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.4 Alert=Yes;Action=Dropped;Attacker=4.2.2.4;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.2 Alert=Yes;Action=Dropped;Attacker=4.2.2.2;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.5 Alert=Yes;Action=Dropped;Attacker=4.2.2.5;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.6 Alert=Yes;Action=Dropped;Attacker=4.2.2.6;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.1 Alert=Yes;Action=Dropped;Attacker=4.2.2.1;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 216.185.111.10 Alert=Yes;Action=Dropped;Attacker=216.185.111.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:11 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.3 Alert=Yes;Action=Dropped;Attacker=4.2.2.3;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.68.170 Alert=Yes;Action=Dropped;Attacker=68.87.68.170;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.69.154 Alert=Yes;Action=Dropped;Attacker=68.87.69.154;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 69.56.222.10 Alert=Yes;Action=Dropped;Attacker=69.56.222.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 129.250.35.251 Alert=Yes;Action=Dropped;Attacker=129.250.35.251;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 129.250.35.250 Alert=Yes;Action=Dropped;Attacker=129.250.35.250;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.2 Alert=Yes;Event Count=10;Action=Dropped;Attacker=4.2.2.2;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 69.56.222.10 Alert=Yes;Event Count=10;Action=Dropped;Attacker=69.56.222.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 129.250.35.251 Alert=Yes;Event Count=10;Action=Dropped;Attacker=129.250.35.251;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.69.154 Alert=Yes;Event Count=10;Action=Dropped;Attacker=68.87.69.154;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.68.170 Alert=Yes;Event Count=10;Action=Dropped;Attacker=68.87.68.170;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.5 Alert=Yes;Event Count=10;Action=Dropped;Attacker=4.2.2.5;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 66.207.199.44 Alert=Yes;Event Count=11;Action=Dropped;Attacker=66.207.199.44;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 216.185.111.10 Alert=Yes;Event Count=10;Action=Dropped;Attacker=216.185.111.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 67.19.1.10 Alert=Yes;Event Count=11;Action=Dropped;Attacker=67.19.1.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 67.19.0.10 Alert=Yes;Event Count=11;Action=Dropped;Attacker=67.19.0.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.3 Alert=Yes;Event Count=10;Action=Dropped;Attacker=4.2.2.3;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 129.250.35.250 Alert=Yes;Event Count=10;Action=Dropped;Attacker=129.250.35.250;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.6 Alert=Yes;Action=Dropped;Attacker=4.2.2.6;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.1 Alert=Yes;Event Count=10;Action=Dropped;Attacker=4.2.2.1;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.4 Alert=Yes;Action=Dropped;Attacker=4.2.2.4;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.94.157.1 Alert=Yes;Event Count=9;Action=Dropped;Attacker=68.94.157.1;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.94.156.1 Alert=Yes;Event Count=7;Action=Dropped;Attacker=68.94.156.1;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 64.102.255.44 Alert=Yes;Event Count=10;Action=Dropped;Attacker=64.102.255.44;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.6 Alert=Yes;Event Count=11;Action=Dropped;Attacker=4.2.2.6;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.4 Alert=Yes;Event Count=11;Action=Dropped;Attacker=4.2.2.4;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.5 Alert=Yes;Action=Dropped;Attacker=4.2.2.5;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.1 Alert=Yes;Action=Dropped;Attacker=4.2.2.1;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.2 Alert=Yes;Action=Dropped;Attacker=4.2.2.2;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 216.185.111.10 Alert=Yes;Action=Dropped;Attacker=216.185.111.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.3 Alert=Yes;Action=Dropped;Attacker=4.2.2.3;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.94.157.1 Alert=Yes;Action=Dropped;Attacker=68.94.157.1;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.94.156.1 Alert=Yes;Action=Dropped;Attacker=68.94.156.1;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 129.250.35.251 Alert=Yes;Action=Dropped;Attacker=129.250.35.251;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:10 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 129.250.35.250 Alert=Yes;Action=Dropped;Attacker=129.250.35.250;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.64.154 Alert=Yes;Action=Dropped;Attacker=68.87.64.154;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.68.170 Alert=Yes;Action=Dropped;Attacker=68.87.68.170;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 69.56.222.10 Alert=Yes;Action=Dropped;Attacker=69.56.222.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 67.19.1.10 Alert=Yes;Action=Dropped;Attacker=67.19.1.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.87.69.154 Alert=Yes;Action=Dropped;Attacker=68.87.69.154;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 67.19.0.10 Alert=Yes;Action=Dropped;Attacker=67.19.0.10;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 66.207.199.44 Alert=Yes;Action=Dropped;Attacker=66.207.199.44;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 64.102.255.44 Alert=Yes;Action=Dropped;Attacker=64.102.255.44;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.6 Alert=Yes;Action=Dropped;Attacker=4.2.2.6;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.4 Alert=Yes;Action=Dropped;Attacker=4.2.2.4;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.5 Alert=Yes;Action=Dropped;Attacker=4.2.2.5;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.2 Alert=Yes;Action=Dropped;Attacker=4.2.2.2;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.1 Alert=Yes;Action=Dropped;Attacker=4.2.2.1;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.94.156.1 Alert=Yes;Action=Dropped;Attacker=68.94.156.1;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 68.94.157.1 Alert=Yes;Action=Dropped;Attacker=68.94.157.1;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-BAM-18014 DNS Invalid DNS type The type of a DNS record does not comply with the RFC standard Blink 4.4.2 9 4.2.2.3 Alert=Yes;Action=Dropped;Attacker=4.2.2.3;Attacker Port=53;Victim IP=192.168.0.103;Victim Port=63610;Protocol=UDP;Args=46;Process Path=E:\Downloads\dnsbench(6).exe;
    9/30/2009 16:09 BLINK-ENG-0 Information Delete log All logs deleted Blink
    		1

    Alert=No;

     

     

     

     

     

     

     

     
    Filed under:

  • 10-04-2009 3:57 PM In reply to

    Re: GRC's DNSB

    Reply Contact

    Nicula, Brian, do either of you have input on this issue?

  • 10-09-2009 3:25 PM In reply to

    • bpatten
    • Top 10 Contributor
    • Joined on 09-24-2007
    • Irvine, CA
    • Posts 155

    Re: GRC's DNSB

    Reply Contact

     I havent seen this tool in action, but it seems like the DNS packets generated by the tool dont conform to DNS RFC specification, which is why Blink is stopping the packets.

    If you need to run the tool anyway, you can disable the rule temporarily by right clicking the event in the Blink Event log, select Go to Rule, and then uncheck it. You can then go back and re-check it once you're done using the tool.

  • 10-09-2009 3:44 PM In reply to

    Re: GRC's DNSB

    Reply Contact

    Brian,

         The tool can be found here:  http://www.grc.com/dev/DNSBench.exe
Page 1 of 1 (9 items)
© 1995 - 2009 eEye Incorporated