mirror of
https://github.com/adulau/pdns-qof.git
synced 2024-12-23 01:05:58 +00:00
commit
a6574acb62
3 changed files with 17 additions and 10 deletions
|
@ -12,8 +12,6 @@ This allows the person issuing the query to combined and/or compare results.
|
|||
|
||||
The output format is in JSON.
|
||||
|
||||
|
||||
|
||||
How to Contribute to the Document
|
||||
---------------------------------
|
||||
|
||||
|
@ -23,7 +21,7 @@ You can make pull request to the xml document. We are looking for comments from
|
|||
IETF Internet-Draft
|
||||
-------------------
|
||||
|
||||
- [Version 6 published as Internet-Draft](https://datatracker.ietf.org/doc/draft-dulaunoy-dnsop-passive-dns-cof/) - April 8, 2019
|
||||
- [Version 7 published as Internet-Draft](https://datatracker.ietf.org/doc/draft-dulaunoy-dnsop-passive-dns-cof/) - June 25, 2020
|
||||
|
||||
|
||||
Users and Use-cases
|
||||
|
@ -32,6 +30,8 @@ Users and Use-cases
|
|||
* [CERT.at](https://pdns.cert.at)
|
||||
* [Farsight](https://farsightsecurity.com)
|
||||
* [CIRCL](https://www.circl.lu/services/passive-dns/)
|
||||
* [D4 Project Passive DNS](https://www.d4-project.org/2019/05/28/passive-dns-tutorial.html)
|
||||
* [balboa](https://github.com/DCSO/balboa)
|
||||
* 360CN?
|
||||
* ...
|
||||
|
||||
|
|
|
@ -50,7 +50,7 @@
|
|||
<?rfc subcompact="no" ?>
|
||||
<!-- keep one blank line between list items -->
|
||||
<!-- end of list of popular I-D processing instructions -->
|
||||
<rfc category="info" docName="draft-dulaunoy-dnsop-passive-dns-cof-06" ipr="trust200902">
|
||||
<rfc category="info" docName="draft-dulaunoy-dnsop-passive-dns-cof-07" ipr="trust200902">
|
||||
<!-- category values: std, bcp, info, exp, and historic
|
||||
ipr values: full3667, noModification3667, noDerivatives3667
|
||||
you can add the attributes updates="NNNN" and obsoletes="NNNN"
|
||||
|
@ -129,7 +129,7 @@
|
|||
</address>
|
||||
</author>
|
||||
|
||||
<date month="April" year="2019" />
|
||||
<date month="June" year="2020" />
|
||||
<area>General</area>
|
||||
<workgroup>Domain Name System Operations</workgroup>
|
||||
|
||||
|
@ -245,10 +245,17 @@ ws = *(
|
|||
<t>This field returns the last time that the unique tuple (rrname, rrtype, rdata) record has been seen via master file import. The date is expressed in seconds (decimal) since 1st of January 1970 (Unix timestamp). The time zone MUST be UTC. This field is represented as a <xref target="RFC4627">JSON</xref> number.</t>
|
||||
</section>
|
||||
<section title="origin">
|
||||
<t>Specifies the resource origin of the Passive DNS response. This field is represented as a <xref target="RFC1035">Domain Name</xref> (DNS).
|
||||
</t>
|
||||
<t>Specifies the resource origin of the Passive DNS response. This field is represented as a <xref target="RFC3986">Uniform Resource Identifier</xref> (URI).
|
||||
</t>
|
||||
</section>
|
||||
<section title="time_first_ms">
|
||||
<t>Same meaning as the field "time_first", with the only difference, that the resolution is in milliseconds since 1st of January 1970 (UTC).
|
||||
</t>
|
||||
</section>
|
||||
<section title="time_last_ms">
|
||||
<t>Same meaning as the field "time_last", with the only difference, that the resolution is in milliseconds since 1st of January 1970 (UTC).
|
||||
</t>
|
||||
</section>
|
||||
|
||||
</section>
|
||||
<section title="Additional Fields Registry">
|
||||
<t>In accordance with <xref target="RFC6648"/>, designers of new passive DNS applications that would need additional fields can request and register new field name at https://github.com/adulau/pdns-qof/wiki/Additional-Fields.</t>
|
||||
|
|
|
@ -50,7 +50,7 @@
|
|||
<?rfc subcompact="no" ?>
|
||||
<!-- keep one blank line between list items -->
|
||||
<!-- end of list of popular I-D processing instructions -->
|
||||
<rfc category="info" docName="draft-dulaunoy-dnsop-passive-dns-cof-06" ipr="trust200902">
|
||||
<rfc category="info" docName="draft-dulaunoy-dnsop-passive-dns-cof-07" ipr="trust200902">
|
||||
<!-- category values: std, bcp, info, exp, and historic
|
||||
ipr values: full3667, noModification3667, noDerivatives3667
|
||||
you can add the attributes updates="NNNN" and obsoletes="NNNN"
|
||||
|
@ -129,7 +129,7 @@
|
|||
</address>
|
||||
</author>
|
||||
|
||||
<date month="April" year="2019" />
|
||||
<date month="June" year="2020" />
|
||||
<area>General</area>
|
||||
<workgroup>Domain Name System Operations</workgroup>
|
||||
|
||||
|
|
Loading…
Reference in a new issue