Journal of Internet Disasters

Fri Nov 13 23:57:48 UTC 1998

At 03:11 PM 11/13/1998 -0800, you wrote:

>- it is known that various individuals flood the Internic with packets
>related to aatempts to suck down the whois database, one item at a time
>and/or detect when a specific domain name goes off hold and becomes
>available for re-registration
>
>- pathshow indicated that the Internic circuit over which AXFR was being
>attempted was congested.
>
>>     - f.root-servers.net and NSI's servers reacted differently.  What
>> 	are the differences between them (BIND versions, in-house source
>> 	code changes, operating systems/run-time libraries/compilers)
>

Of course, it would be possible for Internic to have multiple connections
routing whois requests over one link, and DNS transfers over another link.
Or limiting the bandwidth for whois, reserving bandwidth for DNS. etc.
Aside from the obvious solution to not have insane servers.

The purpose of analyzing disasters is to identify ways of avoiding them.

		--Dean
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
           Plain Aviation, Inc                  dean at av8.com
           LAN/WAN/UNIX/NT/TCPIP          http://www.av8.com
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++