免费一1一级做爰片在线观看

University of Auckland DNS traffic,
September 2003

General observations.

Packets of the University of Auckland DNS traffic were collected starting Monday 2003-09-15 05:38 UTC for 64.5 hours (from Monday, September 15, 17:38 till Thursday, September 18, 10:08 local time). Our sample contains 111430 queries to root servers from 19 U. of Auckland hosts, and 257455 queries to gTLD servers from 18 hosts. The average query rates (per minute) are 28.8 to roots and 66.5 to gTLDs.

Figure 1 shows the cumulative distribution function of number of clients.

Fig. 1. Cumulative distribution function of number of clients.

We define as high level users (HLU) the UA hosts that sent more than 10,000 mesages to either root servers or to gTLD servers.

HLU for roots (3 out of 19 name servers)

measurement data inside information

# of queries (%) ip address host name software comments

38212 (34.3) 35.35.216.130 kronos1.cs.auckland.ac.nz bind 9.2.1 cs local resolver

33570 (30.1) 135.35.216.130 kronos2.cs.auckland.ac.nz bind 9.2.1 cs local resolver

22973 (20.6) 1.1.216.130 dns2.auckland.ac.nz bind 9.2.2 ua main local resolver

measurement data	inside information
# of queries (%)	ip address	host name	software	comments
38212 (34.3)	35.35.216.130	kronos1.cs.auckland.ac.nz	bind 9.2.1	cs local resolver
33570 (30.1)	135.35.216.130	kronos2.cs.auckland.ac.nz	bind 9.2.1	cs local resolver
22973 (20.6)	1.1.216.130	dns2.auckland.ac.nz	bind 9.2.2	ua main local resolver

HLU for gTLDs (5 out of 18 name servers)

# of queries IP address Host name

128399 1.1.216.130 dns2.auckland.ac.nz

31177 4.1.216.130 mailhost2.auckland.ac.nz

29808 4.191.216.130 mailhost2.auckland.ac.nz

22097 1.191.216.130 net.auckland.ac.nz

19772 2.1.216.130 dns1.auckland.ac.nz

Queries to root servers vs. time.
Figure 2 (a,b) shows the rate of queries (measured in 5 minutes intervals) vs. time. These plots are similar to Nevil's NeTraMet plots and can be directly compared witd his data.

Fig. 2a. Number of queries to roots per 5 minute intervals. Each line is shifted up by 100.
Queries to roots clearly exhibit a periodic "comb-like" structure with a peak approximately in the middle of every hour. Closer check showed that this pattern is entirely due to two of the three HLUs: kronos1 and kronos2.

Fig. 2b. Number of queries to gTLDs per 5 minute intervals. Each line is shifted up by 100.
There is no evidence of periodic "comb-like" structure in queries to gTLD. Query rate to all gTLDS increases simultaneously at around 21:00 UTC on 09/15. Other simultaneous peaks are at 3:00 UTC and at 21:00 UTC on 09/16. Note that 21:00 UTC corresponds to 9:00 of local time. The peak might be due to the beginning of a work day in New Zealand.
Distribution of queries among root servers.
(Note: UA is in New Zealand and at the moment of observation there was an anycast F-root server nearby. B, L are in Southern California; E is in Northern California; A, C, D, G, H, J are on East Coast; I and K are in Europe; M is in Japan.)

Fig. 3. Distribution of queries among root servers.
Figure 3 shows distribution of queries to root servers for three top users (accounting for 85% of all UA queries), and for the rest of UA name servers (15% of all queries). The two highest users (kronos1 and kronos2, local resolvers for Computer Science Department that generate 34% and 30% of the total UA DNS traffic, correspondingly) distribute their requests among all 13 root servers in a nearly uniform manner. The tdird highest user (dns2, main local resolver for the whole University, generates 21% of the total trafiic) prefers F-root (as expected), but still sends more than 50% of its queries to other roots. The remaining 16 UA nameservers send less than 25% of their queries to F-root. The next two popular root servers for them are A and J - which may indicate Windows behavior (check witd Duane).
Response times.
All three HLU of roots run the latest versions of BIND. In order to understand the differences in their root selecting patterns, we considered the distributions of response times from roots to each host (Figure 4).

a) kronos1
b) kronos2
c) dns2

Fig. 4. Distribution of response times.
The general pattern is very similar in all three cases. Based on the response times, root servers can be grouped in five groups:
1. F-root - consistently has shorter response times than any other root server (as expected);
2. L, B, J;
3. A, C, D, E, H, M;
4. G - the latencies are spread out in a strange bimodal pattern;
5. K and I - two root servers in Europe have longest response times.
Note that membership in groups (2) and (3) does not correlate with the geographical locations of the root servers.
The dns2 host appears to select root servers based on response time (as expected for BIND algoritdm): F is its most preferred root (43% of queries), B, L, and J follow (about 6-7% of queries to each of tdose), while the remaining nine root servers receive about 4% of queries each. However, kronos1 and kronos2 resolvers that also run BIND send their queries to all roots in a more or less uniform pattern seemingly ignoring the response times.
Assuming that the distributions of response times are similar for all UA nameservers, we see that the relatively frequent choice of A root by the remaining 16 nameservers also is not based on its performance.

# of queries	IP address	Host name
128399	1.1.216.130	dns2.auckland.ac.nz
31177	4.1.216.130	mailhost2.auckland.ac.nz
29808	4.191.216.130	mailhost2.auckland.ac.nz
22097	1.191.216.130	net.auckland.ac.nz
19772	2.1.216.130	dns1.auckland.ac.nz

Query patterns.

We have looked at types of queries sent by the UA nameservers. The results are summarized in the Table below.

query type

hosts A (1) PTR (12) MX (15) AAAA (28) other total bad

kronos1 724 35884 409 1185 10 38212 0

kronos2 413 31815 306 1026 10 33570 0

dns2 17826 337 27 1062 2797 22049 924 (4%)

all other 7090 4645 1374 1202 2207 16518 157 (<1%)

	query type
hosts	A (1)	PTR (12)	MX (15)	AAAA (28)	other	total	bad
kronos1	724	35884	409	1185	10	38212	0
kronos2	413	31815	306	1026	10	33570	0
dns2	17826	337	27	1062	2797	22049	924 (4%)
all other	7090	4645	1374	1202	2207	16518	157 (<1%)

The Table provides more questions than answers.

Why are dns2 and kronos* functionally so different?
Why does dns2 send so many A queries to roots (an A query every 12-15 seconds)? In other words, why does it forget TLDs so quickly?
What is the cause of so many PTR queries by kronos*? Why is the bulk of these queries sent with a 1 hour period? Note from Nevil (insider information): I've gone through our BIND config (for dns2), it's very close to just relying on BIND's default behaviour right through. The kronos* servers are - I believe - much the same, except that they'll specify dns2 as a forwarder.
Is it possible that the root selection is determined by functionality rather than by response time or by name resolving software?
How can root server placement be optimized if response time plays little role in root server selection (in BIND, and even less so in Windows)?

Last minute update - 40 hours of DNS traffic collected on November 3 and 4, 2003.

The rate of queries to root servers is about 11 queries per minute, which is three times lower than in September.
kronos1 and kronos2 are not HLUs anymore: they sent only about 400 queries each. In this data set dns2 is the highest user with 15098 queries (52% of the total traffic).
As before, about 4% of dns2 queries have a wrong type (0 or > 255).
As before, DNS traffic generated bu dns2 is dominated by A queries (80%). The rate of A queries from this host also has not changed: one A query every 12 seconds.
The selection of root servers is exactly as expected:

Acknowledgment. Many thanks to Ken Keys for his graphic scripts. "They are called 'sampans,'" Doctor Bronson explained, "and are made entirety of wood. Of late years the Japanese sometimes use copper or iron nails for fastenings; but formerly you found them without a particle of metal about them." "And I am afraid I betrayed the fact," Bruce admitted. "I might have thought of some other way of accounting for my presence here. Still, that rather piratical-looking young man seemed to think you had done right. What's this about some man picked up in the garden?" CHAPTER LII. THE CAGE IS OPENED. Third. Combination machines can only be employed with success when one attendant performs all the operations, and when the change from one to another requires but little adjustment and re-arrangement. When their train approached ours they looked out of the windows, or opened the doors, and waved and greeted and shouted at the top of their voices. me in the cab, he told me that for three days they gave you up. of mind is gone for ever--but anyway, I never cared much for just Two legs waved over the last cockpit place. She waited, too, made silent by sudden realization of how futile anything that she might say would be. "I am glad to see you again," she faltered; "it is four years since Black River and the cloud-burst." She was angry at her own stupidity and want of resource, and her tone was more casual than she meant it to be. The result of this division shook the last resistance of Walpole. When the motion which had been rejected on the 18th of December—for copies of the correspondence with the King of Prussia—was again put, he made no opposition, and it[79] passed without a division. He made, however, one more attempt to carry his measures. In the disputed election of Chippenham he stood his ground against the petition, and was defeated by a majority of one. It was now clear to himself that he must give way. His relatives and friends assured him that to defer longer was only to court more decided discomfiture. On the 31st of January, he, therefore, prepared to depart for his seat at Houghton, and the next morning he demanded of the king, in a private audience, leave to retire. George, on this occasion, evinced a degree of feeling that did him honour. When the old Minister who had served him through so long a course of years knelt to kiss hands, the king embraced him, shed tears, and begged that he would often come to see him. On the 9th of February Sir Robert was created Earl of Orford, and on the 11th he made a formal resignation of all his places. "I'll chance it," said Alf desperately, reaching for the cup of coffee. "I'm sure it'll be better for me to eat something." "They d?an't care, nuther—it's only me." "Wipe the blood off his face." There was silence, in which a coal fell. She still stood with her arms outstretched; he knew that she was calling him—as no woman had ever called him—with all that of herself which was in his heart, part of his own being. HoME 免费一1一级做爰片在线观看 ENTER NUMBET 0018100106.com.cn
www.nmn9000.com.cn
qyxcp.net.cn
www.minshu.org.cn
www.svpx.com.cn
wishr.com.cn
1000151.com.cn
fccb291.com.cn
lpxo.com.cn
023fang.com.cn

免费一1一级做爰片在线观看

University of Auckland DNS traffic, September 2003

University of Auckland DNS traffic,
September 2003