[dns-operations] Null padding query packets

Jon Lewis jlewis at lewis.org
Tue Apr 2 01:30:58 UTC 2013

On Tue, 2 Apr 2013, Dobbins, Roland wrote:

> On Apr 2, 2013, at 8:06 AM, Jon Lewis wrote:
>> Typical query size on these servers is about 80-90 bytes, so the padded queries are >400 bytes of nulls.
> Does anything stand out as odd or somewhat consistent across the actual queries being made?

They look legitimate and too small in number to be any sort of DoS if 
that's what you're getting at.

  Jon Lewis, MCP :)           |  I route
                              |  therefore you are
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________

More information about the dns-operations mailing list