> On 21 Mar 2017, at 14:09, Paul Wouters <p...@nohats.ca> wrote:
> 
> Can we tell from the queries or a timeline of query quantity if this
> is generic .home pollution that predates the homenet protocol suite,
> or actually the result the homenet protocol suite being deployed?

What's this "we"? :-)

The short answer to your question Paul is I don't know. If someone could 
confirm what qname/qtype tuples are limited to the homenet suite, I could go 
looking for them in the DITL datasets. This will not be a trivial task. One 
year's DITL data generally consists of a few TB of data spread over 300K 
compressed pcap files containing a total of ~100B queries. It takes about 1 day 
of elapsed time and a few CPU-weeks to chug through that.

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to