At last the answer... http://www.lurhq.com/sinit.html
Appears that the increase in DNS traffic is down to the Sinit P2P trojan. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html