[Full-disclosure] Google chrome sending strange DNS queries
p0wnsauc3 at gmail.com
Thu May 19 13:38:15 BST 2011
Start Chrome and start Wireshark. Apply the filter udp.port==5355
For Link Local Multicast Name Resolution protocol (LLMNR) protocol you
will similar output in wireshark.
This protocol was implemented Windows Vista onwards, so you should
this in Windows Server 2008 and Windows 7 as well.
On 19 May 2011 17:50, Sherwyn <infolookup at gmail.com> wrote:
> Interesting I will have to test this one and see. I know recently someone did a writeup about Microsoft doing a similar phone home when you launch I.E so it can verify you internet connection.
> -----Original Message-----
> From: Eric <dkn4a1 at gmail.com>
> Sender: full-disclosure-bounces at lists.grok.org.uk
> Date: Thu, 19 May 2011 02:37:35
> To: <full-disclosure at lists.grok.org.uk>
> Subject: [Full-disclosure] Google chrome sending strange DNS queries
> Has anyone ever noticed, the sort of DNS queries when you fire/running
> The DNS queries for domain names likes:
> Behavior has been observed on Linux as well as Windows systems.
> See the attached screenshot of wireshark dump.
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
Full-Disclosure is hosted and sponsored by Secunia.