From 9b789bbce7ceb63a2c2c1ddd4d64d20c000df86f Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy
Date: Thu, 25 Jun 2020 14:44:58 +0200
Subject: [PATCH 1/6] chg: [doc] add D4 Project - Passive DNS
---
README.md | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
diff --git a/README.md b/README.md
index a075f73..bc3e74c 100644
--- a/README.md
+++ b/README.md
@@ -12,8 +12,6 @@ This allows the person issuing the query to combined and/or compare results.
The output format is in JSON.
-
-
How to Contribute to the Document
---------------------------------
@@ -32,6 +30,7 @@ Users and Use-cases
* [CERT.at](https://pdns.cert.at)
* [Farsight](https://farsightsecurity.com)
* [CIRCL](https://www.circl.lu/services/passive-dns/)
+ * [D4 Project Passive DNS](https://www.d4-project.org/2019/05/28/passive-dns-tutorial.html)
* 360CN?
* ...
From ffbc74ef9fe357412ea9888bfc928062e2aa2308 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy
Date: Thu, 25 Jun 2020 14:49:48 +0200
Subject: [PATCH 2/6] new: [millisecond resolution] time_first_ms and
time_last_ms added
---
i-d/pdns-qof.xml | 13 ++++++++++---
1 file changed, 10 insertions(+), 3 deletions(-)
diff --git a/i-d/pdns-qof.xml b/i-d/pdns-qof.xml
index 47fccd4..2fb85fe 100644
--- a/i-d/pdns-qof.xml
+++ b/i-d/pdns-qof.xml
@@ -245,10 +245,17 @@ ws = *(
This field returns the last time that the unique tuple (rrname, rrtype, rdata) record has been seen via master file import. The date is expressed in seconds (decimal) since 1st of January 1970 (Unix timestamp). The time zone MUST be UTC. This field is represented as a JSON number.
- Specifies the resource origin of the Passive DNS response. This field is represented as a Domain Name (DNS).
-
+ Specifies the resource origin of the Passive DNS response. This field is represented as a Uniform Resource Identifier (URI).
+
+
+
+ Same meaning as the field "time_first", with the only difference, that the resolution is in milliseconds since 1st of January 1970 (UTC).
+
+
+
+ Same meaning as the field "time_last", with the only difference, that the resolution is in milliseconds since 1st of January 1970 (UTC).
+
-