[dns-operations] Fingerprinting stub resolvers

Matthew Pounsett matt at conundrum.com
Fri Jan 4 16:05:47 UTC 2013

A friend of mine at an ISP asked me recently whether I had any suggestions for fingerprinting stub resolvers.  They've got pcaps from the downstream side of their caching servers and are looking at trying to pull more interesting statistics than query counts out of them.  I didn't have any good suggestions, but it seems like an interesting question to ask of one's name server.   Has anyone else tackled this before?  Do tools exist?

More information about the dns-operations mailing list