On Wed, 08 Dec 2004 18:38:14 -0500, Stuart D. Gathman wrote: >> Here are the last 20 (which my subjective judgement says are correct): > > 65.112.76.15 usfshlxmx01.myreg.net 201.128.108.41 [snip] > 80.143.79.97 p508F4F61.dip0.t-ipconnect.de DYN
Looks like you could do something like look for a part of the dns name which is over a certain length with a high fraction of numbers and punctuation characters. Of course, you could build up a probability tree of the chance of a character being followed by another character in a dynamic name and a static name. This might work well, as many are sequences of numbers (high chance of number followed by number), and mixed characters and numbers, which are unusual in normal dns names. Jeremy -- http://mail.python.org/mailman/listinfo/python-list