| Event Id | 5504 |
| Source | DNS |
| Description | DNS Server encountered invalid domain name in packet from <IP address>. Packet is rejected. |
| Event Information | According to Microsoft: Cause 1: This event log might be triggered by the following: A nonvalid domain name. DNS supports only the following characters: 0-9, a-z, A-Z, . (period), and - (hyphen). A saturated or improperly working Internet connection. A nonvalid ISP IP address. Resolution: Try the following: Check that only valid characters are used in the domain name. Check your Internet connection. Check that only your ISPs DNS IP addresses are set as forwarders. CAUSE 2: Certain queries to the DNS server (like a reverse lookup) result in a response that contains a damaged data section, and this can occur when the data in the packet uses compression. The damaged data packet causes the buffer to be overrun, which causes the DNS service to generate an access violation error message and hang. RESOLUTION: To resolve this problem, obtain the latest service pack for Windows 2000. |
| Reference Links | The DNS server encountered an invalid domain name in a packet from %1.
How to Prevent DNS Cache Pollution Access Violation in Dns.exe When Logging Is Enabled |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.