[Collisions] Weird dest IP addr

Kevin White kwhite at jasadvisors.com
Mon Oct 7 15:28:53 UTC 2013


In the 2008 data for a and j root, I'm seeing a lot of queries destined for:

 

198.41.0.10

 

Which isn't the official root server address of anything.

 

For example:

 

non-root:
/mnt/oarc-pool4/DITL-200803/RAW/verisign/a-root-and-old-j-root/20080319/0950
17.333638.pcap.gz 2008-03-19 09:50:41.683549 IP 66.152.201.19.1101 >
198.41.0.10.53: 53758 A? xpone.home. (28)

 

My current logic throws that row out (throws out any rows that aren't
destined for a valid root server IP).

 

Is there some historical reason why queries to this address in 2008 might be
considered valid?

 

Thank you,

 

Kevin

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.dns-oarc.net/pipermail/collisions/attachments/20131007/b56ad31f/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4869 bytes
Desc: not available
URL: <http://lists.dns-oarc.net/pipermail/collisions/attachments/20131007/b56ad31f/attachment.bin>


More information about the Collisions mailing list