[dns-operations] Null padding query packets

[Dobbins, Roland]

On Apr 2, 2013, at 8:30 AM, Jon Lewis wrote:

> They look legitimate and too small in number to be any sort of DoS if that's what you're getting at.

I was just wondering if it seems likely that they're synthetically generated for some purpose (not necessarily DDoS), or if they appear to be legitimate queries, as far as can be determined.  It sounds as if the latter is the case . . .

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton