[dns-operations] traffic jam

[Roland Dobbins]

On 27 Apr 2015, at 11:56, Randy Bush wrote:

> looks normal except the server is not (supposed to be) recursive

It would be really interesting to see the actual RRs being queried - see 
if they look like some of the prepending attacks we've seen, or 
something else.

Most of the prepending attacks are for A records, AFAIK.

-----------------------------------
Roland Dobbins <rdobbins at arbor.net>