[dns-operations] Truncation query

[Paul Hoffman]

On 6 Feb 2017, at 6:25, Ray Bellis wrote:

> Should the server have set ANCOUNT=0 in this packet for it to be 
> legal,
> or should the presence of TC=1 be taken to mean that "all bets are 
> off"
> for everything after the question section?

I agree with Peter's reading of RFC 1035. You don't know for sure, but 
the last *COUNT>0 probably indicates where the truncation probably 
happened.