[dns-operations] ip id from servers
Randy Bush
randy at psg.com
Thu Mar 11 02:28:41 UTC 2010
>> we are running a measurement experiment which involves a port tap on a
>> fiber to one of our routers. on that tap, we are seeing what we believe
>> to be unusual behavior from some packet sources (see below). what we
>> think we are seeing are a significant number of duplicates of the tuple
>> (source ip, ip id).
> And if you throw in the destination ip do you still have lots of duplicates?
(source + ip id) should be unique. we're not trying to reassemble (at
this point). we're just trying to make sure our tap is good.
randy
More information about the dns-operations
mailing list