[dns-operations] Null padding query packets

Dobbins, Roland rdobbins at arbor.net
Tue Apr 2 01:35:18 UTC 2013

On Apr 2, 2013, at 8:30 AM, Jon Lewis wrote:

> They look legitimate and too small in number to be any sort of DoS if that's what you're getting at.

I was just wondering if it seems likely that they're synthetically generated for some purpose (not necessarily DDoS), or if they appear to be legitimate queries, as far as can be determined.  It sounds as if the latter is the case . . .

Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton

More information about the dns-operations mailing list