2013-12-25 10:53:01 +00:00
|
|
|
Passive DNS - Common Output Format
|
|
|
|
|
==================================
|
2013-12-07 07:04:43 +00:00
|
|
|
|
|
|
|
|
This document describes the output format used between Passive DNS query interface. The output format description
|
|
|
|
|
includes also a common meaning per Passive DNS system.
|
|
|
|
|
|
2020-06-25 10:53:19 +00:00
|
|
|
This format originated as a discussion between Aaron Kaplan, Paul Vixie, Henry Stern and Alexandre (Adulau) in ~ 2011.
|
|
|
|
|
It was submitted to the IETF in 2014 and since then had a few minor updates.
|
|
|
|
|
|
|
|
|
|
It is being used by multiple operators of passive DNS services to offer an identical output format for queries to a passive DNS database.
|
|
|
|
|
This allows the person issuing the query to combined and/or compare results.
|
|
|
|
|
|
|
|
|
|
The output format is in JSON.
|
|
|
|
|
|
2013-12-07 07:04:43 +00:00
|
|
|
How to Contribute to the Document
|
|
|
|
|
---------------------------------
|
|
|
|
|
|
|
|
|
|
You can make pull request to the xml document. We are looking for comments from passive DNS developers in order to improve the document.
|
2014-04-04 10:09:47 +00:00
|
|
|
|
2020-06-25 10:53:19 +00:00
|
|
|
|
2019-02-10 21:07:12 +00:00
|
|
|
IETF Internet-Draft
|
|
|
|
|
-------------------
|
|
|
|
|
|
2020-06-25 15:11:48 +00:00
|
|
|
- [Version 7 published as Internet-Draft](https://datatracker.ietf.org/doc/draft-dulaunoy-dnsop-passive-dns-cof/) - June 25, 2020
|
2019-02-10 21:07:12 +00:00
|
|
|
|
2020-06-25 12:32:54 +00:00
|
|
|
|
|
|
|
|
Users and Use-cases
|
|
|
|
|
--------------------
|
|
|
|
|
|
|
|
|
|
* [CERT.at](https://pdns.cert.at)
|
|
|
|
|
* [Farsight](https://farsightsecurity.com)
|
|
|
|
|
* [CIRCL](https://www.circl.lu/services/passive-dns/)
|
2020-06-25 12:44:58 +00:00
|
|
|
* [D4 Project Passive DNS](https://www.d4-project.org/2019/05/28/passive-dns-tutorial.html)
|
2020-06-25 12:32:54 +00:00
|
|
|
* 360CN?
|
|
|
|
|
* ...
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
