> >> Does such traffic actually occur in the wild, or would it only be used
> >> in attacks?
> > 
> > Such traffic absolutely occurs in the wild. I have three reasonably
> > busy name servers where this is logged as an error from the ipfw code,
> > e.g.
> 
> and I know of a couple of more people who have seen it and have ways to
> trigger it with legitimate servers.  I have never tracked things down
> in more detail at some point back.

If anybody would like to track down this, I can supply pcap data.

Steinar Haug, Nethelp consulting, sth...@nethelp.no
--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------

Reply via email to