[Collisions] Weird dest IP addr
Kevin White
kwhite at jasadvisors.com
Mon Oct 7 15:28:53 UTC 2013
In the 2008 data for a and j root, I'm seeing a lot of queries destined for:
198.41.0.10
Which isn't the official root server address of anything.
For example:
non-root:
/mnt/oarc-pool4/DITL-200803/RAW/verisign/a-root-and-old-j-root/20080319/0950
17.333638.pcap.gz 2008-03-19 09:50:41.683549 IP 66.152.201.19.1101 >
198.41.0.10.53: 53758 A? xpone.home. (28)
My current logic throws that row out (throws out any rows that aren't
destined for a valid root server IP).
Is there some historical reason why queries to this address in 2008 might be
considered valid?
Thank you,
Kevin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.dns-oarc.net/pipermail/collisions/attachments/20131007/b56ad31f/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4869 bytes
Desc: not available
URL: <http://lists.dns-oarc.net/pipermail/collisions/attachments/20131007/b56ad31f/attachment.bin>
More information about the Collisions
mailing list