[dns-operations] EDNS0

[Rob Thomas]

Hi, team.

] How is that different then amplification with recursive dns servers?
] (since in both cases the a smaller request packet of about 40-50 bytes 
] causes dns server to send large response up to 500bytes to forged 
] source ip address)

One difference is that the victim would receive the response
from one (authoritative) name server instead of from 122000
(recursive) name servers.

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
http://www.cymru.com/
ASSERT(coffee != empty);