DNS: A statistical analysis of name server traffic at local network-to-Internet connections

Chris Brandhorst; Aiko Pras

doi:10.1007/0-387-31170-X_19

DNS: A statistical analysis of name server traffic at local network-to-Internet connections

Chris Brandhorst, Aiko Pras

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

3 Citations (Scopus)

213 Downloads (Pure)

Abstract

This paper puts forward a purely statistical analysis of name server traffic captured at four different locations: two links to residential networks, and two to the Dutch academic and research institute. Analysis of the system can give insight in the use and performance of the protocol, which is helpful for future improvement. Multiple analyses can show the development of the performance over time and help create quality models. The analysis shows that a little more than 12% of all queries are not answered upon. Three quarters of the lookups are successful: they give the client the correct IP address mapping for the requested hostname. 90% is answered within 275 ms, with an average of 152 ms. In 9% of all cases, clients ask for a hostname which does not exist. At one of the locations, a client is discovered which sends queries to two DNS servers at a remarkable rate: one each 11 to 22 ms.

Original language	English
Title of host publication	EUNICE 2005: Networks and Applications Towards a Ubiquitously Connected World
Subtitle of host publication	IFIP International Workshop on Networked Applications, Colmenarejo, Madrid/Spain, 6–8 July, 2005
Editors	Carlos Delgado Kloos, Andrés Marín, David Larrabeiti
Place of Publication	Boston, MA
Publisher	Springer
Pages	255-270
Number of pages	7
ISBN (Electronic)	978-0-387-31170-8
ISBN (Print)	978-0-387-30815-9
DOIs	https://doi.org/10.1007/0-387-31170-X_19
Publication status	Published - 2006
Event	11th Open European Summer School 2005: Networks and Applications Towards a Ubiquitously Connected World - Madrid, Spain Duration: 6 Jul 2005 → 8 Jul 2005 Conference number: 11

Publication series

Name	IFIP International Federation for Information Processing
Publisher	Springer
Volume	196
ISSN (Print)	1571-5736

Conference

Conference	11th Open European Summer School 2005
Abbreviated title	EUNICE 2005
Country/Territory	Spain
City	Madrid
Period	6/07/05 → 8/07/05

Keywords

DNS
Internet
Measurement
Performance

Access to Document

10.1007/0-387-31170-X_19

Brandhorst2005dnsAccepted author version, 173 KB

Cite this

Brandhorst, C., & Pras, A. (2006). DNS: A statistical analysis of name server traffic at local network-to-Internet connections. In C. Delgado Kloos, A. Marín, & D. Larrabeiti (Eds.), EUNICE 2005: Networks and Applications Towards a Ubiquitously Connected World: IFIP International Workshop on Networked Applications, Colmenarejo, Madrid/Spain, 6–8 July, 2005 (pp. 255-270). (IFIP International Federation for Information Processing; Vol. 196). Springer. https://doi.org/10.1007/0-387-31170-X_19

Brandhorst, Chris ; Pras, Aiko. / DNS: A statistical analysis of name server traffic at local network-to-Internet connections. EUNICE 2005: Networks and Applications Towards a Ubiquitously Connected World: IFIP International Workshop on Networked Applications, Colmenarejo, Madrid/Spain, 6–8 July, 2005. editor / Carlos Delgado Kloos ; Andrés Marín ; David Larrabeiti. Boston, MA : Springer, 2006. pp. 255-270 (IFIP International Federation for Information Processing).

@inproceedings{6a9f96038a3f42b6a62912d8940e8bdf,

title = "DNS: A statistical analysis of name server traffic at local network-to-Internet connections",

abstract = "This paper puts forward a purely statistical analysis of name server traffic captured at four different locations: two links to residential networks, and two to the Dutch academic and research institute. Analysis of the system can give insight in the use and performance of the protocol, which is helpful for future improvement. Multiple analyses can show the development of the performance over time and help create quality models. The analysis shows that a little more than 12% of all queries are not answered upon. Three quarters of the lookups are successful: they give the client the correct IP address mapping for the requested hostname. 90% is answered within 275 ms, with an average of 152 ms. In 9% of all cases, clients ask for a hostname which does not exist. At one of the locations, a client is discovered which sends queries to two DNS servers at a remarkable rate: one each 11 to 22 ms.",

keywords = "DNS, Internet, Measurement, Performance",

author = "Chris Brandhorst and Aiko Pras",

year = "2006",

doi = "10.1007/0-387-31170-X_19",

language = "English",

isbn = "978-0-387-30815-9",

series = "IFIP International Federation for Information Processing",

publisher = "Springer",

pages = "255--270",

editor = "{Delgado Kloos}, Carlos and Andr{\'e}s Mar{\'i}n and David Larrabeiti",

booktitle = "EUNICE 2005: Networks and Applications Towards a Ubiquitously Connected World",

address = "Germany",

note = "11th Open European Summer School 2005 : Networks and Applications Towards a Ubiquitously Connected World, EUNICE 2005 ; Conference date: 06-07-2005 Through 08-07-2005",

}

Brandhorst, C & Pras, A 2006, DNS: A statistical analysis of name server traffic at local network-to-Internet connections. in C Delgado Kloos, A Marín & D Larrabeiti (eds), EUNICE 2005: Networks and Applications Towards a Ubiquitously Connected World: IFIP International Workshop on Networked Applications, Colmenarejo, Madrid/Spain, 6–8 July, 2005. IFIP International Federation for Information Processing, vol. 196, Springer, Boston, MA, pp. 255-270, 11th Open European Summer School 2005, Madrid, Spain, 6/07/05. https://doi.org/10.1007/0-387-31170-X_19

DNS: A statistical analysis of name server traffic at local network-to-Internet connections. / Brandhorst, Chris; Pras, Aiko.
EUNICE 2005: Networks and Applications Towards a Ubiquitously Connected World: IFIP International Workshop on Networked Applications, Colmenarejo, Madrid/Spain, 6–8 July, 2005. ed. / Carlos Delgado Kloos; Andrés Marín; David Larrabeiti. Boston, MA: Springer, 2006. p. 255-270 (IFIP International Federation for Information Processing; Vol. 196).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - DNS: A statistical analysis of name server traffic at local network-to-Internet connections

AU - Brandhorst, Chris

AU - Pras, Aiko

N1 - Conference code: 11

PY - 2006

Y1 - 2006

N2 - This paper puts forward a purely statistical analysis of name server traffic captured at four different locations: two links to residential networks, and two to the Dutch academic and research institute. Analysis of the system can give insight in the use and performance of the protocol, which is helpful for future improvement. Multiple analyses can show the development of the performance over time and help create quality models. The analysis shows that a little more than 12% of all queries are not answered upon. Three quarters of the lookups are successful: they give the client the correct IP address mapping for the requested hostname. 90% is answered within 275 ms, with an average of 152 ms. In 9% of all cases, clients ask for a hostname which does not exist. At one of the locations, a client is discovered which sends queries to two DNS servers at a remarkable rate: one each 11 to 22 ms.

AB - This paper puts forward a purely statistical analysis of name server traffic captured at four different locations: two links to residential networks, and two to the Dutch academic and research institute. Analysis of the system can give insight in the use and performance of the protocol, which is helpful for future improvement. Multiple analyses can show the development of the performance over time and help create quality models. The analysis shows that a little more than 12% of all queries are not answered upon. Three quarters of the lookups are successful: they give the client the correct IP address mapping for the requested hostname. 90% is answered within 275 ms, with an average of 152 ms. In 9% of all cases, clients ask for a hostname which does not exist. At one of the locations, a client is discovered which sends queries to two DNS servers at a remarkable rate: one each 11 to 22 ms.

KW - DNS

KW - Internet

KW - Measurement

KW - Performance

U2 - 10.1007/0-387-31170-X_19

DO - 10.1007/0-387-31170-X_19

M3 - Conference contribution

SN - 978-0-387-30815-9

T3 - IFIP International Federation for Information Processing

SP - 255

EP - 270

BT - EUNICE 2005: Networks and Applications Towards a Ubiquitously Connected World

A2 - Delgado Kloos, Carlos

A2 - Marín, Andrés

A2 - Larrabeiti, David

PB - Springer

CY - Boston, MA

T2 - 11th Open European Summer School 2005

Y2 - 6 July 2005 through 8 July 2005

ER -

Brandhorst C, Pras A. DNS: A statistical analysis of name server traffic at local network-to-Internet connections. In Delgado Kloos C, Marín A, Larrabeiti D, editors, EUNICE 2005: Networks and Applications Towards a Ubiquitously Connected World: IFIP International Workshop on Networked Applications, Colmenarejo, Madrid/Spain, 6–8 July, 2005. Boston, MA: Springer. 2006. p. 255-270. (IFIP International Federation for Information Processing). doi: 10.1007/0-387-31170-X_19

DNS: A statistical analysis of name server traffic at local network-to-Internet connections

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this