[dns-operations] traffic jam

Roland Dobbins rdobbins at arbor.net
Mon Apr 27 05:46:19 UTC 2015

On 27 Apr 2015, at 11:56, Randy Bush wrote:

> looks normal except the server is not (supposed to be) recursive

It would be really interesting to see the actual RRs being queried - see 
if they look like some of the prepending attacks we've seen, or 
something else.

Most of the prepending attacks are for A records, AFAIK.

Roland Dobbins <rdobbins at arbor.net>

More information about the dns-operations mailing list