How Do I get Sig 6053 to fire?

[gpoer]

We are trying to test sig 6053 would an nslookup, ls *, trigger this signature?

thanks,

Geoff

[mcerha]

If you have a Linux or *nix box with the dig command, try:

# dig @server somedomain.com any

This will create a query with the any record. The @server is optional for a nameserver that will cross in front of the sensor.