Interesting.
Now I notice that you have obviously decided that the root server query had a length
of 45.
Did you just guess this or did you have a more exact method for determining that value
? and if so how did you go about it ?
ie. Did you use tcpdump OR did you look at the named source OR ......
Thanks,
Wilson Fletcher
----------
From: Atsawin Chowanakritsanakul[SMTP:[EMAIL PROTECTED]]
Sent: Monday, 20 March 2000 23:44
To: [EMAIL PROTECTED]
Cc: 'Lourdes Jones'; 'Diald List'
Subject: Re: Just looking at my filters and wanted your opinions
Wilson Fletcher wrote:
> Note: bind starts querying the root servers immediately in order to
> determine response times and which server it should poll first in future.
I used to use this rule to ignore bind's root server query. Now, I run
diald in manual mode so I'm not sure if this rule still work.
ignore udp udp.dest=udp.domain,ip.tot_len=45
Hope this help.
Joke.
--
__ * Atsawin Chowanakritsanakul
/ \___ * Thasala Suzuki Co., Ltd.
\ THAI \ * Nakhon Si Thammarat 80160
< LAND_/ * THAILAND
\ /\| * Email: [EMAIL PROTECTED] (Preferred)
// * ICQ : 35572647 (Rarely Read)
\\_ * Tel : +66 75 521123 (Urgent only)
\_\ * URL : http://home.nakhon.net/joke/
-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]
