Skip to main content

DNS Query Question

More
20 years 2 months ago #5275 by FallenZer0
Hello All,

Is it possible for a user to *choose* if the DNS query is Recursion or Iteration? I've Ethereal, and would be interested to see how Iteration works. Any help would be appreciated.

-There Is A Foolish Corner In The Brain Of The Wisest Man- Aristotle
More
20 years 2 months ago #5276 by nske
Replied by nske on topic Re: DNS Query Question
hi FallenZer0,

the direct way is to craft your queries with a program that can craft custom UDP packets, i.e. nemesis . You can read here: www.firewall.cx/dns-query-format.php about the bits used for each flag (iterative/recursive is controlled by 8th bit of the data) and the rest formating of the query.
More
20 years 2 months ago #5289 by FallenZer0
Replied by FallenZer0 on topic Re: DNS Query Question
Thankyou nske. I downloaded Nemesis and I'll give it a try to craft a DNS query with *Iteration*. Awesome tutorial about DNS.

-There Is A Foolish Corner In The Brain Of The Wisest Man- Aristotle
More
20 years 2 months ago #5290 by sahirh
Replied by sahirh on topic Re: DNS Query Question
*fondly remembers long days with nemesis*

Try hping as well, its really awesome.

Sahir Hidayatullah.
Firewall.cx Staff - Associate Editor & Security Advisor
tftfotw.blogspot.com
More
20 years 2 months ago #5334 by FallenZer0
Replied by FallenZer0 on topic Re: DNS Query Question
Hello All,

I ran Nemesis and have gotten the following error message.

'The Procedure entry point PacketGetNetInfo could not be located in the dynamic link library packet.dll'

I've WinPcap 3.1beta3.

Reading the install.txt document I've found out that Nemesis requires WinPcap version 2.3 or 3.0. I'd un-installed the WinPcap 3.1beta3 and re-installed WinPcap3.0 and I don't get that error. The reason I've posted this, may be someone might come across this problem.

-There Is A Foolish Corner In The Brain Of The Wisest Man- Aristotle
More
20 years 2 months ago #5339 by sahirh
Replied by sahirh on topic Re: DNS Query Question
Are you using a dial-up connection ? If so winpcap is useless..

Get yourself a Linux box or some virtualization and emulation.. packet drivers under windows are a nasty box of surprises... whle nmap win32 used to work for me, I never trusted the results..

Cheers,

Sahir Hidayatullah.
Firewall.cx Staff - Associate Editor & Security Advisor
tftfotw.blogspot.com
Time to create page: 0.134 seconds