{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,4]],"date-time":"2026-02-04T17:30:10Z","timestamp":1770226210619,"version":"3.49.0"},"publisher-location":"Cham","reference-count":58,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030725815","type":"print"},{"value":"9783030725822","type":"electronic"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-72582-2_27","type":"book-chapter","created":{"date-parts":[[2021,3,29]],"date-time":"2021-03-29T12:02:43Z","timestamp":1617019363000},"page":"460-477","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":12,"title":["Fragmentation, Truncation, and Timeouts: Are Large DNS Messages Falling to Bits?"],"prefix":"10.1007","author":[{"given":"Giovane C. M.","family":"Moura","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Moritz","family":"M\u00fcller","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Marco","family":"Davids","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Maarten","family":"Wullink","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cristian","family":"Hesselman","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,3,30]]},"reference":[{"key":"27_CR1","unstructured":"1.1.1: The Internet\u2019s fastest, privacy-first DNS resolver, AprIL 2018. https:\/\/1.1.1.1\/"},{"key":"27_CR2","doi-asserted-by":"crossref","unstructured":"Abley, J., Gudmundsson, O., Majkowski, M., Hunt, E.: Providing minimal-sized responses to DNS Queries That Have QTYPE=ANY. RFC 8482, IETF, January 2019","DOI":"10.17487\/RFC8482"},{"key":"27_CR3","doi-asserted-by":"crossref","unstructured":"Arends, R., Austein, R., Larson, M., Massey, D., Rose, S.: DNS security introduction and requirements. RFC 4033, IETF, March 2005","DOI":"10.17487\/rfc4033"},{"key":"27_CR4","doi-asserted-by":"crossref","unstructured":"Bellis, R.: DNS Transport over TCP - implementation requirements. RFC 5966, IETF, August 2010","DOI":"10.17487\/rfc5966"},{"key":"27_CR5","doi-asserted-by":"crossref","unstructured":"Bonica, R., Baker, F., Huston, G., Hinden, R., Troan, O., Gont, F.: IP fragmentation considered fragile. RFC 8900, IETF, September 2020","DOI":"10.17487\/RFC8900"},{"key":"27_CR6","doi-asserted-by":"publisher","unstructured":"Brandt, M., Dai, T., Klein, A., Shulman, H., Waidner, M.: Domain validation++ For MitM-resilient PKI. In: CCS 2018, New York, NY, USA, pp. 2060\u20132076. Association for Computing Machinery (2018). https:\/\/doi.org\/10.1145\/3243734.3243790","DOI":"10.1145\/3243734.3243790"},{"key":"27_CR7","doi-asserted-by":"crossref","unstructured":"Damas, J., Graff, M., Vixie, P.: Extension mechanisms for DNS (EDNS(0)). RFC 6891, IET, April 2013","DOI":"10.17487\/rfc6891"},{"key":"27_CR8","unstructured":"De Boer, M., Bosma, J.: Discovering Path MTU black holes on the Internet using RIPE Atlas. Master\u2019s thesis, University of Amsterdam (2012). https:\/\/nlnetlabs.nl\/downloads\/publications\/pmtu-black-holes-msc-thesis.pdf"},{"key":"27_CR9","doi-asserted-by":"crossref","unstructured":"Deering, S., Hinden, R.: Internet Protocol, Version 6 (IPv6) Specification. RFC 2460, IETF, December 1998","DOI":"10.17487\/rfc2460"},{"key":"27_CR10","doi-asserted-by":"crossref","unstructured":"Dickinson, J., Dickinson, S., Bellis, R., Mankin, A., Wessels, D.: DNS transport over TCP - implementation requirements. RFC 7766, IETF, March 2016","DOI":"10.17487\/RFC7766"},{"key":"27_CR11","doi-asserted-by":"crossref","unstructured":"Elvy, M., Nedved, R.: Network mail path service. RFC 915, IETF, December 1984","DOI":"10.17487\/rfc0915"},{"key":"27_CR12","unstructured":"Fujiwara, K., Vixie, P.: Serving stale data to improve DNS resiliency (work in progress). Internet Draft, April 2020. https:\/\/tools.ietf.org\/html\/draft-fujiwara-dnsop-avoid-fragmentation-03"},{"key":"27_CR13","doi-asserted-by":"crossref","unstructured":"Gont, F.: Security implications of predictable fragment identification values. RFC 7739, IETF, February 2016","DOI":"10.17487\/RFC7739"},{"key":"27_CR14","doi-asserted-by":"crossref","unstructured":"Gont, F., Linkova, J., Chown, T., Liu, W.: Observations on the dropping of packets with IPv6 extension headers in the real world. RFC 7872, IETF, June 2016","DOI":"10.17487\/RFC7872"},{"key":"27_CR15","unstructured":"Google: secure transports for DNS: DNS response truncation, January. https:\/\/developers.google.com\/speed\/public-dns\/docs\/secure-transports#tls-sni"},{"key":"27_CR16","unstructured":"Google: Public DN, January 2020. https:\/\/developers.google.com\/speed\/public-dns\/"},{"key":"27_CR17","doi-asserted-by":"crossref","unstructured":"Herzberg, A., Shulman, H.: Fragmentation considered poisonous, or: one-domain-to-rule-them-all. In: 2013 IEEE Conference on Communications and Network Security (CNS), pp. 224\u2013232. IEEE (2013)","DOI":"10.1109\/CNS.2013.6682711"},{"key":"27_CR18","doi-asserted-by":"crossref","unstructured":"Hoffman, P., McManus, P.: DNS queries over HTTPS (DoH). RFC 8484, IETF, October 2018","DOI":"10.17487\/RFC8484"},{"key":"27_CR19","doi-asserted-by":"crossref","unstructured":"Hoffman, P., Sullivan, A., Fujiwara, K.: DNS Terminology. RFC 8499, IETF, January 2019","DOI":"10.17487\/RFC8499"},{"key":"27_CR20","doi-asserted-by":"crossref","unstructured":"Hu, Z., Zhu, L., Heidemann, J., Mankin, A., Wessels, D., Hoffman, P.: Specification for DNS over transport layer security (TLS). RFC 7858, IETF, May 2016","DOI":"10.17487\/RFC7858"},{"key":"27_CR21","unstructured":"Huitema, K., Mankin, A., Dickinson, S.: Specification of DNS over dedicated QUIC connections (work in progress). Internet Draft, October 2020. https:\/\/datatracker.ietf.org\/doc\/draft-ietf-dprive-dnsoquic\/"},{"key":"27_CR22","unstructured":"Huston, G.: Dealing with IPv6 fragmentation in the DNS, August 2017. https:\/\/blog.apnic.net\/2017\/08\/22\/dealing-ipv6-fragmentation-dns\/"},{"key":"27_CR23","unstructured":"Internet Assigned Numbers Authority (IANA): Root Files (2020). https:\/\/www.iana.org\/domains\/root\/files"},{"key":"27_CR24","unstructured":"ISC: 4. bind 9 configuration reference (2020). https:\/\/bind9.readthedocs.io\/en\/v9_16_6\/reference.html"},{"key":"27_CR25","doi-asserted-by":"crossref","unstructured":"Krishnan, S.: Handling of overlapping IPv6 fragments. RFC 5722, IETF, December 2009","DOI":"10.17487\/rfc5722"},{"key":"27_CR26","doi-asserted-by":"crossref","unstructured":"Kulkarni, M., Patel, A., Leung, K.: Mobile IPv4 dynamic home agent (HA) assignment. RFC 4433, IETF, March 2006","DOI":"10.17487\/rfc4433"},{"key":"27_CR27","doi-asserted-by":"crossref","unstructured":"Laurie, B., Sisson, G., Arends, R., Blacka, D.: DNS Security (DNSSEC) Hashed authenticated denial of existence. RFC 5155, IETF, March 2008","DOI":"10.17487\/rfc5155"},{"key":"27_CR28","unstructured":"Lieuallen, A.: DNS Flag Day 2020 and Google Public DNS, October 2020. https:\/\/www.youtube.com\/watch?v=CHprGFJv_WE"},{"key":"27_CR29","doi-asserted-by":"crossref","unstructured":"McPherson, D., Oran, D., Thaler, D., Osterweil, E.: Architectural considerations of IP anycast. RFC 7094, IET, January 2014","DOI":"10.17487\/rfc7094"},{"key":"27_CR30","doi-asserted-by":"crossref","unstructured":"Miller, I.: Protection against a variant of the tiny fragment attack (RFC 1858). RFC 3128, IETF, June 2001","DOI":"10.17487\/rfc3128"},{"key":"27_CR31","doi-asserted-by":"crossref","unstructured":"Mockapetris, P.: Domain names - concepts and facilities. RFC 1034, IETF, November 1987","DOI":"10.17487\/rfc1034"},{"key":"27_CR32","doi-asserted-by":"crossref","unstructured":"Mockapetris, P.: Domain names - implementation and specification. RFC 1035, IETF, November 1987","DOI":"10.17487\/rfc1035"},{"key":"27_CR33","doi-asserted-by":"crossref","unstructured":"Moura, G.C.M., Heidemann, J., M\u00fcller, M., de O. Schmidt, R., Davids, M.: When the dike breaks: dissecting dns defenses during DDoS. In: Proceedings of the ACM Internet Measurement Conference, Boston, MA, USA, pp. 8\u201321, October 2018","DOI":"10.1145\/3278532.3278534"},{"key":"27_CR34","doi-asserted-by":"crossref","unstructured":"Moura, G.C.M., Heidemann, J., de O. Schmidt, R., Hardaker, W.: Cache me if you can: effects of DNS Time-to-Live. In: Proceedings of the ACM Internet Measurement Conference, Amsterdam, The Netherlands, pp. 101\u2013115. ACM, October 2019","DOI":"10.1145\/3355369.3355568"},{"key":"27_CR35","doi-asserted-by":"crossref","unstructured":"M\u00fcller, M., Moura, G.C.M., de O. Schmidt, R., Heidemann, J.: Recursives in the wild: engineering authoritative DNS servers. In: Proceedings of the ACM Internet Measurement Conference, London, UK, pp. 489\u2013495. ACM (2017)","DOI":"10.1145\/3131365.3131366"},{"key":"27_CR36","unstructured":"OpenDNS: setup guide: OpenDNS. https:\/\/www.opendns.com\/setupguide\/, January 2019. https:\/\/www.opendns.com\/setupguide"},{"key":"27_CR37","doi-asserted-by":"crossref","unstructured":"Partridge, C., Mendez, T., Milliken, W.: Host Anycasting Service. RFC 1546, IETF, November 1993","DOI":"10.17487\/rfc1546"},{"key":"27_CR38","doi-asserted-by":"crossref","unstructured":"Postel, J.: Internet control message protocol. RFC 792, IETF, September 1981","DOI":"10.17487\/rfc0792"},{"key":"27_CR39","doi-asserted-by":"crossref","unstructured":"Postel, J.: Internet Protocol. RFC 791, IETF, September 1981","DOI":"10.17487\/rfc0791"},{"key":"27_CR40","unstructured":"Quad9: Internet security & privacy in a few easy steps. https:\/\/quad9.net, January 2021"},{"key":"27_CR41","doi-asserted-by":"crossref","unstructured":"Rekhter, Y., Li, T., Hares, S.: A border gateway protocol 4 (BGP-4). RFC 4271, IETF, January 2006","DOI":"10.17487\/rfc4271"},{"key":"27_CR42","unstructured":"Rescorla, E., Oku, K., Sullivan, N., Wood, C.: TLS encrypted client hello (work in progress). Internet Draft, December 2020. https:\/\/tools.ietf.org\/html\/draft-ietf-tls-esni-09"},{"key":"27_CR43","unstructured":"RIPE NCC: RIPE Atlas measurement IDS, October 2020. https:\/\/atlas.ripe.net\/measurements\/ID. where ID is the experiment ID: large:27759950, small:27760294"},{"key":"27_CR44","unstructured":"RIPE NCC: RIPE Atlas Probes, May 2020. https:\/\/ftp.ripe.net\/ripe\/atlas\/probes\/archive\/2020\/05\/"},{"issue":"3","key":"27_CR45","first-page":"2","volume":"18","author":"RIPE Ncc Staff","year":"2015","unstructured":"RIPE Ncc Staff: RIPE atlas: a global internet measurement network. Internet Protocol Journal (IPJ) 18(3), 2\u201326 (2015)","journal-title":"Internet Protocol Journal (IPJ)"},{"key":"27_CR46","unstructured":"Root Server Operators: Root DNS, May 2020. http:\/\/root-servers.org\/"},{"key":"27_CR47","unstructured":"SIDN Labs: ENTRADA - DNS big data analytics, January 2020 https:\/\/entrada.sidnlabs.nl\/"},{"key":"27_CR48","unstructured":"SIDN Labs: nl stats and data (2020). http:\/\/stats.sidnlabs.nl. https:\/\/stats.sidnlabs.nl\/en\/dnssec.html"},{"key":"27_CR49","doi-asserted-by":"crossref","unstructured":"Thomson, S., Huitema, C., Ksinant, V., Souissi, M.: DNS extensions to support IP version 6. RFC 3596, IETF, October 2003","DOI":"10.17487\/rfc3596"},{"key":"27_CR50","unstructured":"Tomas, H.: IP fragmentation attack on DNS. In: RIPE 67, - Athens, Greece, October 2016. https:\/\/ripe67.ripe.net\/presentations\/240-ipfragattack.pdf"},{"issue":"4","key":"27_CR51","doi-asserted-by":"publisher","first-page":"154","DOI":"10.1109\/MCOM.2014.6828880","volume":"52","author":"G Van Den Broek","year":"2014","unstructured":"Van Den Broek, G., Van Rijswijk-Deij, R., Sperotto, A., Pras, A.: DNSSEC meets real world: dealing with unreachability caused by fragmentation. IEEE Commun. Mag. 52(4), 154\u2013160 (2014)","journal-title":"IEEE Commun. Mag."},{"key":"27_CR52","doi-asserted-by":"crossref","unstructured":"Vixie, P.: Extension Mechanisms for DNS (EDNS0). RFC 2671, IETF, August 1999","DOI":"10.17487\/rfc2671"},{"key":"27_CR53","unstructured":"Weaver, N., Kreibich, C., Nechaev, B., Paxson, V.: Implications of Netalyzr\u2019s DNS measurements. In: Proceedings of the First Workshop on Securing and Trusting Internet Names (SATIN), Teddington, United Kingdom. Citeseer (2011)"},{"key":"27_CR54","unstructured":"Wessels, D.: RSSAC002-data, May 2020. https:\/\/github.com\/rssac-caucus\/RSSAC002-data\/"},{"key":"27_CR55","unstructured":"Wijngaards, W.: release-1.12.0: Unbound 1.12.0 (2020). https:\/\/github.com\/NLnetLabs\/unbound\/releases\/tag\/release-1.12.0"},{"key":"27_CR56","doi-asserted-by":"crossref","unstructured":"Wullink, M., Moura, G.C., M\u00fcller, M., Hesselman, C.: Entrada: A high-performance network traffic data streaming warehouse. In: Network Operations and Management Symposium (NOMS), 2016 IEEE\/IFIP, pp. 913\u2013918. IEEE, April 2016","DOI":"10.1109\/NOMS.2016.7502925"},{"key":"27_CR57","doi-asserted-by":"crossref","unstructured":"Ziemba, G., Reed, D., Traina, P.: Security considerations for IP fragment filtering. RFC 1858, IETF, October 1995","DOI":"10.17487\/rfc1858"},{"key":"27_CR58","unstructured":"\u0160pa\u010dek, P., Sur\u00fd, O.: DNS flag day 2020, October 2020. https:\/\/dnsflagday.net\/2020\/"}],"container-title":["Lecture Notes in Computer Science","Passive and Active Measurement"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-72582-2_27","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,5,4]],"date-time":"2021-05-04T19:44:18Z","timestamp":1620157458000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-72582-2_27"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030725815","9783030725822"],"references-count":58,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-72582-2_27","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"30 March 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"PAM","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Passive and Active Network Measurement","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Cottbus","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Germany","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 March 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31 March 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"pam2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.pam2021.b-tu.de\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"HotCrp","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"75","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"33","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"44% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4.9","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}