Observed DNS Resolution Misbehavior

Document Type Expired Internet-Draft (individual)
Authors Piet Barber  , John Brady  , Matt Larson 
Last updated 2001-11-12
Stream (None)
Intended RFC status (None)
Expired & archived
pdf htmlized (tools) htmlized bibtex
Stream Stream state (No stream defined)
Consensus Boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


This Internet-Draft describes DNS name server and stub resolver behavior that results in a significant query volume sent to the root and top-level domain (TLD) name servers. In some cases we recommend minor additions to the DNS protocol specification and corresponding changes in name server implementations to alleviate these unnecessary queries. In one case, we have highlighted behavior of a popular name server implementation that does not conform to the DNS specification. The recommendations made in this document are a direct byproduct of observation and analysis of abnormal query traffic patterns seen at two of the thirteen root name servers and all thirteen com/net/org TLD name servers.


Piet Barber (pbarber@verisign.com)
John Brady (jbrady@verisign.com)
Matt Larson (mlarson@verisign.com)

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)