On 5/12/20 12:11 PM, Greg Choules wrote: > @Keith Mitchell <mailto:[email protected]> yes, we see dips in queries > being handled by our resolvers as well.
That's interesting. FWIW OARC recently completed its annual capture of DNS query traffic at the roots. The data still needs to be crunched, but overall we're unsurprisingly seeing a *significant* increase in query volume compared to previous years. It should contain at least one of your 21:00 BST dips FWIW. I was thinking more of looking at the payload of the aggregated DNS queries (e.g. via Passive DNS) to see if there are any changes in what names and/or QTYPES are queried for around the dip time. Keith
