Re: lot of 'ripe.net IN ANY +ED' queries

2012-07-24 Thread Daniel Migault
Actually we detected these ripe.net ANY requests by observing an increase in TCP DNS requests due to large DNSSEC responses. IP address does not seem spoofed. It seems these (very few) client wait 10 sec before closing their TCP connection, which increases the platform load. We think it is a mal

Re: measuring dns query

2012-05-10 Thread Daniel Migault
/lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Daniel Migault Orange Labs / Security Lab +33 (0) 1 45 29 60 52 +33 (0) 6 70 72 69 58 _