Towards passive DNS software fingerprinting
Ruetee Chitpranee, Kensuke Fukuda · 2013
This paper presents an alternative fingerprinting technique to identify DNS software running on caching resolvers in passively collected traffic traces. With this method, it is not required to send additional queries during the measurement, unlike existing techniques that rely on probing and may not be effective due to firewall filtering or refused responses.