[dns-operations] QID 1234

Wed Jan 20 20:23:29 UTC 2016

> On Jan 20, 2016, at 3:14 PM, Jared Mauch <jared at puck.nether.net> wrote:
> 
> Anyone seen this where you have the same repeating query for a.root-servers.net with query-id of 1234?
> 
> 15:12:11.714588 IP 172.29.51.8.36281 > x.x.x.x.53: 1234+ A? a.root-servers.net. (36)
> 15:12:11.715537 IP x.x.x.x.53 > 172.29.51.8.36281: 1234 1/0/0 A 198.41.0.4 (52)

Seems this is a TP-Link router fingerprint.

- Jared