[dns-operations] DNS measurement traffic etiquette

[John Levine]

It appears that Andreas Ott <andreas at naund.org> said:
>What are my best options to find out who is behind all this traffic when it
>comes from anonymous sources?

A lot of botnet malware has prefetched DNS lookups for sending spam
and the like that tend to be very stale.

>For how long should I expect this query traffic to continue?

Don't hold your breath.

R's,
John