[dns-operations] ip id from servers

Rick Jones rick.jones2 at hp.com
Thu Mar 11 17:18:54 UTC 2010

Randy Bush wrote:
>>>we are running a measurement experiment which involves a port tap on a
>>>fiber to one of our routers.  on that tap, we are seeing what we believe
>>>to be unusual behavior from some packet sources (see below).  what we
>>>think we are seeing are a significant number of duplicates of the tuple
>>>(source ip, ip id).  
>>And if you throw in the destination ip do you still have lots of duplicates?
> (source + ip id) should be unique. 

?  I thought there were stacks that had (more or less) per-destination IP ID spaces.

rick jones

More information about the dns-operations mailing list