Home page logo
/

nanog logo nanog mailing list archives

Re: Odd DNS responses for www.neopets.com
From: "Alex Lambert" <alambert () quickfire org>
Date: Wed, 5 Feb 2003 19:05:32 -0600


Maybe it's just me, but isn't there something odd about a DNS query
coming back with 78 entries for the same host?  It sends back an UDP
packet that gets truncated and the DNS resolver reverts to TCP to get
the full list.

This is often used for server pools (as I'm guessing you know).

It seems to cause problems with Windows clients and/or Windows DNS
servers.  Seems like overkill.

The 78 addresses listed here are all in one bit of a /24. In the cases I've
seen, there are a few servers listed in several different locations,
network- (and location-) wise. I agree that this looks really weird. Perhaps
they use it as a cheap load balancer?



Cheers,

Alex Lambert
alambert () quickfire org

----- Original Message -----
From: "Stephen Milton" <milton () isomedia com>
To: <nanog () merit edu>
Sent: Wednesday, February 05, 2003 6:47 PM
Subject: Odd DNS responses for www.neopets.com




  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]