Report

{% include 'nav.html.j2' %}

DNS Blacklist

{% for item in data['dnstunneling']['blackDomain'] %}

{{ item }}

Sources

{% for src in data['dnstunneling']['blackDomain'][item] %}
• {{ src }}
{% endfor %}

{% endfor %}

DNS datagram oversized

In this section, we analyzed all sources who done DNS request with datagram oversized (200 bytes) and that can be a DNS tunneling.

{% for item in data['dnstunneling']['oversized'] %}

{{ item }}

Sources

{% for entry in data['dnstunneling']['oversized'][item] %}
• {{ entry['source'] }} ({{ entry['len'] }} bytes)
{% endfor %}

{% endfor %} {% include 'footer.html.j2' %}