[dns-operations] compressing DNS traffic data

Dobbins, Roland rdobbins at arbor.net
Wed Dec 8 12:19:58 UTC 2010

On Dec 8, 2010, at 6:51 PM, Ondřej Surý wrote:

> If the "compression" ratio is 1:5 or 1:10 compared to raw packets, it will pay of now and in the future.

Which is why there's IPFIX and PSAMP.  Just taking incoming PSAMP of UDP/53 and TCP/53 over IPFIX, then strip out what you don't want, and store the remainder.  Done.

This whole idea of inventing Yet Another Protocol just doesn't make sense, IMHO.  It's what happens when folks get an idea, then don't check to see if perhaps there's already prior art which is applicable to the problem-set at hand.

Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

 	       Sell your computer and buy a guitar.

More information about the dns-operations mailing list