[Collisions] Old root server addresses?

[Kevin White]

They come from lots of files, but here's one each:

 

192.112.36.2 -> 1131709

192.112.36.2 ->
/mnt/oarc-pool4/DITL-20100413/RAW/g-root/ditl/g.root-servers2.net/20100413/1
93000.001396.pcap.gz

192.112.36.1 -> 1128991

192.112.36.1 ->
/mnt/oarc-pool4/DITL-20100413/RAW/g-root/ditl/g.root-servers.net/20100415/14
5000.000762.pcap.gz

204.152.184.76 -> 18574

204.152.184.76 ->
/mnt/oarc-pool3/DITL-200601/RAW/isc/pcap/sfo2/20060110/134803.985796.pcap.gz

 

192.33.14.30 -> 3212

192.33.14.30 ->
/mnt/oarc-pool4/DITL-20120417/RAW/j-root/pcap/nr1-cn-j/20120417/085900.95410
7.pcap.gz

202.12.27.33 -> 2914

202.12.27.33 -> /mnt/oarc-pool4/DITL-20120417/RAW/m-root/ditl/MROOT-CDG/20

 

192.48.79.30 -> 2061

192.48.79.30 ->
/mnt/oarc-pool4/DITL-20120417/RAW/j-root/pcap/devnr1-tko2-j/20120417/090211.
731575.pcap.gz

 

199.6.6.6 -> 1028

199.6.6.6 ->
/mnt/oarc-pool4/DITL-20110412/RAW/f-root/ditl/nbo1b/20110412/113006.562605.p
cap.gz

 

I'm not sure how useful a larger "distribution" of source/file might be.  If
it would be helpful, I can crank out some more code.

 

Thanks,

 

Kevin

 

 

From: David Conrad [mailto:drc at virtualized.org] 
Sent: Wednesday, October 09, 2013 2:38 PM
To: Kevin White
Cc: 'collisions at lists.dns-oarc.net'
Subject: Re: [Collisions] Old root server addresses?

 

Kevin,

 

On Oct 9, 2013, at 7:35 AM, Kevin White <kwhite at jasadvisors.com> wrote:

Obviously, the first two are the largest potential ones.  I have
192.112.36.4 in my list, for g-root.  .1 and .2 are likely also valid, but I
can't find anything really strongly stating so.

 

192.112.36.2 -> 1131726

192.112.36.1 -> 1129014

204.152.184.76 -> 18574

 

I'm fairly certain this is an internal (non-anycast) address for the F root
server.  I've noticed that sometimes the internal addresses leak out.





192.33.14.30 -> 3212

202.12.27.33 -> 2914

 

Similarly, this is a non-anycast address for "M".





192.48.79.30 -> 2061

199.6.6.6 -> 1028

 

Might help (if you have it) to list which data file (or directory) these
were found in.

 

Regards,

-drc

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.dns-oarc.net/pipermail/collisions/attachments/20131009/d1c40f89/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4869 bytes
Desc: not available
URL: <http://lists.dns-oarc.net/pipermail/collisions/attachments/20131009/d1c40f89/attachment.bin>