[dns-operations] ip id from servers

Randy Bush randy at psg.com
Thu Mar 11 02:20:34 UTC 2010


> Across what kind of measurement interval are the duplicates observed?
> Within milliseconds, seconds ... hours?

an hour or so.  other sources did not exhibit such behavior.

> Is this is the ID field in the layer 3 IP header - could these be
> multiple fragments from the same datagram?

yes, could be.  but, again, other sources did not exhibit such
behavior.  so i am wondering about dns or server oddities.

randy



More information about the dns-operations mailing list