How to track DNS resolution sources

[Notify Me]

Hi!

I hope I'm wording this correctly. I had a incident at a client site where
a DNS record was being spoofed. How does one track down the IP address
that's returning the false records ? What tool can one use?

Thanks!




-- 
Sent from MetroMail