SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Technology Stocks : Novell (NOVL) dirt cheap, good buy? -- Ignore unavailable to you. Want to Upgrade?


To: David O'Berry who wrote (26528)4/7/1999 11:51:00 AM
From: ToySoldier  Read Replies (2) | Respond to of 42771
 
David,

Who is doing generating the initiating packet (i.e. which machine is doing the query)? Are there any other programs up and running?

If not, the DNS Querys are very suspicious. There are WinSock socket Tracing programs out there that can identify what application is opening up the socket. I tried to find one of these programs but havent had any luck. This would tell you if WORD is involved in the conversation.

The trace will tell you much more, but generally DNS Queries do not function as "Keep-Alive" packets. They normally are manually engaged by user events. That is why its suspicious.

Toy