A sample TXT record in the text-based zone file will look similar to the following:
@ TXT ( "Just some Text \303\204\303\204\303\204\303\204\303\204\303\204\303\204" )
victim TXT ( "please do not overwrite me \303\204\303\204\303\226\303\226\303\234\303\274\303\274\303\266\303\266\303\266\303\266\303\266 1234 564" )
tester.victim A 10.10.10.10
Additionally, one of the following errors may be logged in the application event log:
Windows Server 2003
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 14.11.2003
Time: 10:03:08
User: N/A
Computer: Server Name
Description:
Faulting application dns.exe, version 5.2.3790.100, faulting module ntdll.dll, version 5.2.3790.0, fault address 0x00003847.
For more information, see Help and Support Center at http://support.microsoft.com.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 64 6e 73 ure dns
0018: 2e 65 78 65 20 35 2e 32 .exe 5.2
0020: 2e 33 37 39 30 2e 31 30 .3790.10
0028: 30 20 69 6e 20 6e 74 64 0 in ntd
0030: 6c 6c 2e 64 6c 6c 20 35 ll.dll 5
0038: 2e 32 2e 33 37 39 30 2e .2.3790.
0040: 30 20 61 74 20 6f 66 66 0 at off
0048: 73 65 74 20 30 30 30 30 set 0000
0050: 33 38 34 37 3847
Event Type: Information
Event Source: Application Error
Event Category: (100)
Event ID: 1004
Date: 14.11.2003
Time: 11:07:28
User: N/A
Computer: Server Name
Description:
Reporting queued error: faulting application dns.exe, version 5.2.3790.100, faulting module ntdll.dll, version 5.2.3790.0, fault address 0x00003847.
For more information, see Help and Support Center at http://support.microsoft.com.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 64 6e 73 ure dns
0018: 2e 65 78 65 20 35 2e 32 .exe 5.2
0020: 2e 33 37 39 30 2e 31 30 .3790.10
0028: 30 20 69 6e 20 6e 74 64 0 in ntd
0030: 6c 6c 2e 64 6c 6c 20 35 ll.dll 5
0038: 2e 32 2e 33 37 39 30 2e .2.3790.
0040: 30 20 61 74 20 6f 66 66 0 at off
0048: 73 65 74 20 30 30 30 30 set 0000
0050: 33 38 34 37 3847
Windows 2000 Server
Event Type: Information
Event Source: DrWatson
Event Category: None
Event ID: 4097
User: N/A
Computer: Server Name
Description:The application, dns.exe, generated an application error The error occurred on 03/15/2004 @ 12:40:39.922 The exception generated was 80000003 at address 77FA144B (DbgBreakPoint)
Data:
0000: 0d 0a 0d 0a 41 70 70 6c ....Appl
0008: 69 63 61 74 69 6f 6e 20 ication
0010: 65 78 63 65 70 74 69 6f exceptio
0018: 6e 20 6f 63 63 75 72 72 n occurr
0020: 65 64 3a 0d 0a 20 20 20 ed:..
0028: 20 20 20 20 20 41 70 70 App
0030: 3a 20 64 6e 73 2e 65 78 : dns.ex
0038: 65 20 28 70 69 64 3d 31 e (pid=1
0040: 34 38 38 29 0d 0a 20 20 488)..