news.mlab.sh
Back to the feed
threat-intel

More Odd DNS Records: NIMLOC, (Tue, Jul 7th)

Info
Summary

This article discusses the continued use of NIMLOC DNS records, an obsolete record type originally designed for the Nimrod routing architecture. Despite the demise of NetBIOS and the shift to modern DNS and SMB protocols on Windows networks, macOS systems continue to broadcast these records. The article clarifies that while the underlying Nimrod routing scheme is defunct, the records themselves persist, and Zeek identifies them as NIMLOC.

Read the full article at SANS Internet Storm Center

Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data

Report an error
Confirmed errors are fixed and listed on /corrections.