Spectroscopy of DNS Update Traffic
Presented as a poster at Sigmetrics 2002

Andre Broido, Evi Nemeth, kc claffy
Cooperative Association for Internet Data Analysis - CAIDA
San Diego Supercomputer Center,
University of California, San Diego

We study attempts to dynamically update DNS records for private (RFC1918) addresses, by analyzing the frequency spectrum of updates observed at an authoritative name- server for these addresses. Using a discrete autocorrelation algorithm we found that updates series have periods of 60 or 75 minutes, which we identied as default settings of out- of-the-box Microsoft Windows 2000 and XP DNS software.