At 03:11 PM 11/13/1998 -0800, you wrote:

- it is known that various individuals flood the Internic with packets related to aatempts to suck down the whois database, one item at a time and/or detect when a specific domain name goes off hold and becomes available for re-registration

- pathshow indicated that the Internic circuit over which AXFR was being attempted was congested.

...

- f.root-servers.net and NSI's servers reacted differently. What are the differences between them (BIND versions, in-house source code changes, operating systems/run-time libraries/compilers)

Of course, it would be possible for Internic to have multiple connections routing whois requests over one link, and DNS transfers over another link. Or limiting the bandwidth for whois, reserving bandwidth for DNS. etc. Aside from the obvious solution to not have insane servers. The purpose of analyzing disasters is to identify ways of avoiding them. --Dean ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Plain Aviation, Inc dean@av8.com LAN/WAN/UNIX/NT/TCPIP http://www.av8.com ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++