seclab-ucr/SADDNS2.0

dns_query.sh unable to flood properly

Abhinav-Singhal-8130 opened this issue · 1 comments

Abhinav-Singhal-8130 commented

Hi authors,
I ran dns_query.sh to mute the victim NS and even after replacing -i with --flood in the script, the victim resolver was able to get the dns response upon querying the victim NS which indicates that it is not muted properly. What should be done?

Hoping for a quick response.
Thanks

mkyybx commented
  1. Packet rate is not enough: try confirm with wireshard and if it's not enough just try not to use VMs. Higher CPU frequency helps.
  2. NS is not configured with rate limit. See https://downloads.isc.org/isc/bind9/9.16.5/doc/arm/html/reference.html#response-rate-limiting .