ENUM-AP-53.1: RIPE NCC to examine and report on "strange queries"

At RIPE 54 in Tallinn we commited to providing more detail on the queries prepended with a + in statistics generated last year: In the time period measured (April-November 2006) There were 13797 queries prepended with a + 10081 came from a single source. 2738 came from two further sources. The rest came from 100 different sources. We hope that this level of data satisfies this action point. Regards Brett -- Brett Carr Manager -- DNS Services Group RIPE Network Coordination Centre Amsterdam

On Mon, May 21, 2007 at 11:30:04AM +0200, Brett Carr wrote:
There were 13797 queries prepended with a + 10081 came from a single source. 2738 came from two further sources. The rest came from 100 different sources.
We hope that this level of data satisfies this action point.
under the assumption that 60 q/day are only a tiny fraction of the traffic, it appears to me the '+' phenomenon is less prevalent than I feared after your presentation. Thanks for digging this out. -Peter

Brett Carr wrote:
At RIPE 54 in Tallinn we commited to providing more detail on the queries prepended with a + in statistics generated last year:
Thanks, Brett.
In the time period measured (April-November 2006)
There were 13797 queries prepended with a + 10081 came from a single source.
Has that stopped in the meantime?
2738 came from two further sources. The rest came from 100 different sources.
We hope that this level of data satisfies this action point.
I recall a total of some 26,000 invalid queries - shall I take it that the remaining 12,000 ones are equally spread over all sorts of pathological queries? Thanks and best regards, Carsten

Carsten, first of all my sincere apologies for taking so long to answer your e-mail. On May 22, 2007, at 3:20 PM, Carsten Schiefner wrote:
Brett Carr wrote:
At RIPE 54 in Tallinn we commited to providing more detail on the queries prepended with a + in statistics generated last year:
Thanks, Brett.
In the time period measured (April-November 2006) There were 13797 queries prepended with a + 10081 came from a single source.
Has that stopped in the meantime?
Well I did some further testing over the past couple of days and I still see some queries containing a + but nothing coming from the single source.
2738 came from two further sources. The rest came from 100 different sources. We hope that this level of data satisfies this action point.
I recall a total of some 26,000 invalid queries - shall I take it that the remaining 12,000 ones are equally spread over all sorts of pathological queries?
Indeed they were mainly queries prepended with a 00 or an invalid country code. Brett -- Brett Carr Manager -- DNS Services Group RIPE Network Coordination Centre Amsterdam
participants (3)
-
Brett Carr
-
Carsten Schiefner
-
Peter Koch