large organization nameservers sending icmp packets to dns servers.

Thu Aug 9 21:29:11 UTC 2007

On Thu, 09 Aug 2007 21:05:26 -0000, Paul Vixie said:

> i think you're advising folks to monitor their authority servers to find out
> how many truncated responses are going out and how many TCP sessions result
> from these truncations and how many of these TCP sessions are killed by the
> RFC1035 4.2.2 connection management logic, and if the numbers seem high, then
> they ought to change their applications and DNS content so that truncations
> no longer result.

How does the (eventual) deployment of DNSSEC change these numbers?

And who's likely to feel *that* pain first?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20070809/aa19070b/attachment.sig>