I have been getting a number of these from 3dns.ar.starmedia.com. They seem to be a
kind of MTU path discovery with triangulation for optimal routing purposes. Much less
intrusive that version-bind queries :-)
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Mr. Firewaller
Sent: Wednesday, January 03, 2001 15:24
To: [EMAIL PROTECTED]
Subject: offtopic, large ICMP between DNS servers
Hi folks
We have been seeing a lot of large ICMP traffic with or without fragment
options after or before a DNS query between my DNS(s) servers and anothers
(outsiders) DNS servers.
Out trace issued that the traffic is generated from the outsiders. No matter
if our DNS servers are older or newer, we always receive large ICMP
echo-request.
Has anybody here seen the same in his network?
or
Is that a normal behavior (described by any RFC) to DNS servers?
The packets have a average size of 1024.
NOTE: We have checked the content of each packet in order to look for
commands, but those don't content any strange but only padding.
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com
-
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
