[dns-operations] lot's of .local traffic

[Sebastian Castro]

On 25/07/11 21:43, William F. Maton Sotomayor wrote:
> 
> All,
> 

Hi William:

>     While sitting here at the Delta Quebec City's hotel wobbly network,
> I'm noticing a lot of traffic similar to this:
> 
> 05:18:36.525990 IP 10.255.255.145.5353 > 224.0.0.251.5353: 0*- [0q]
> 4/0/3 (Cache flush) PTR champagne.local., (Cache flush) PTR
> champagne.local., (Cache flush) AAAA fe80::da9e:3fff:fec2:ccc8, (Cache
> flush) A 10.255.255.145 (250)
> 05:18:36.527240 IP6 fe80::da9e:3fff:fec2:ccc8.5353 > ff02::fb.5353: 0*-
> [0q] 4/0/3 (Cache flush) PTR champagne.local., (Cache flush) PTR
> champagne.local., (Cache flush) AAAA fe80::da9e:3fff:fec2:ccc8, (Cache
> flush) A 10.255.255.145 (250)
> 
> Judging from other traffic like this, it seems to be iJunk generated
> from various iThings.  Is a lot of this traffic running up to the roots
> by any chance?
> 

Back in 2009 CAIDA made some analysis on the number of queries for
.local reaching the root servers (based on the traces captured during
The Day in The Life).

The presentation is here (slide 16)
https://www.dns-oarc.net/files/workshop-200911/Sebastian_Castro.pdf

[Disclosure: I'm the author.]


If you don't want to go to the slide, .local represented 6% of the total
traffic seen by the roots. AFAIK nobody has prepared updated figures
using 2010 and 2011 DITL collections.



We didn't investigate how much of that traffic was caused by iThings
versus other operating systems setting the .local in the domain/search
of their corresponding resolv.conf files


Cheers,

> Thanks,
> 
> 
> wfms
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs


-- 
Sebastian Castro
DNS Specialist
.nz Registry Services (New Zealand Domain Name Registry Limited)
desk: +64 4 495 2337
mobile: +64 21 400535