Behavior of DNS' top talkers, a .com/.net view

  • Authors:
  • Eric Osterweil;Danny McPherson;Steve DiBenedetto;Christos Papadopoulos;Dan Massey

  • Affiliations:
  • Verisign Labs;Verisign Labs;Colorado State University;Colorado State University;Colorado State University

  • Venue:
  • PAM'12 Proceedings of the 13th international conference on Passive and Active Measurement
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper provides the first systematic study of DNS data taken from one of the 13 servers for the .com/.net registry. DNS' generic Top Level Domains (gTLDs) such .com and .net serve resolvers from throughout the Internet and respond to billions of DNS queries every day. This study uses gTLD data to characterize the DNS resolver population and profile DNS query types. The results show a small and relatively stable set of resolvers (i.e. the top-talkers) constitute 90% of the overall traffic. The results provide a basis for understanding for this critical Internet service, insights on typical resolver behaviors and the use of IPv6 in DNS, and provides a foundation for further study of DNS behavior.