[Collisions] Weird dest IP addr
jim at rfc1035.com
Mon Oct 7 16:07:18 UTC 2013
On 7 Oct 2013, at 16:49, Kevin White <kwhite at jasadvisors.com> wrote:
> I should have an a-root entry too?
Probably. But it would be for j-root since that's what used to occupy 126.96.36.199.
Hopefully someone at IANA can give you chapter and verse on which IP addresses have been used by which root servers since DNS was first deployed. And when these changed.
I'd be wary of strict checking of destination addresses or coupling these to specific root servers. It's possible the pcaps have traffic which goes to the "real" IP address of an anycast instance, say for monitoring/alerting purposes. [ie Is the box at anycast location foo working OK?] Those addresses may well be information that an RSO is less than keen to share. And they may also change from time to time too. :-)
More information about the Collisions