Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

DNS Query Name Loop DoS Sig 6065/0

We have IPS sensors distributed throughout our internal network and we're seeing signature 6065/0 show up between certain DNS servers at certain times. I have the IPS setup to log these packets and it looks like name queries that are failing keep happening again and again for a domain name I don't recognize, but I'm mostly concerned as to why it's being detected as a loop. Is anyone familiar with this type of network behavior? Is anyone else seeing this signature fire very much?

I appreciate any input.

Casey

1083
Views
0
Helpful
0
Replies