I was doing some testing lately that involved re-ruoting (proxying) regular DNS queries on a personal Mac OS X machine through my software and back to the DNS server of my ISP.
I had the opportunity to see all the queries from regular computer usage being made. And these ones made me curious:
lb._dns-sd._udp.0.1.168.192.in-addr.arpa db._dns-sd._udp.0.1.168.192.in-addr.arpa b._dns-sd._udp.0.1.168.192.in-addr.arpa b._dns-sd._udp.0.1.168.192.in-addr.arpa db._dns-sd._udp.0.1.168.192.in-addr.arpa lb._dns-sd._udp.0.1.168.192.in-addr.arpa
I read somewhere that these are from Apple's Bonjour service discovery. But isn't that supposed to work only on local network, so what would be the purpose of sending those queries to the ISP's DNS server?! Are those guys flooded with a boatload of these queries from people owning macs?! What am I missing here?
UPDATE: I've just checked the response data from these queries and it is always the same. I see the following:
Mentioned in every response (note: I'm looking at raw data, so I might not be decoding this properly. I see, by googling, that others are getting
hostmaster.root-servers.org but I see no
org in the raw bytes of my responses)