adulau/pdns-qof
1
0
Fork 0
mirror of https://github.com/adulau/pdns-qof.git synced 2024-11-22 10:07:09 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #1 from adulau/master

Browse source 
trivial merge
This commit is contained in:
AaronK 2021-04-27 12:03:29 +02:00 committed by GitHub
commit a6574acb62
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 17 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
README.md
View file

@ -12,8 +12,6 @@ This allows the person issuing the query to combined and/or compare results.
The output format is in JSON.
How to Contribute to the Document
---------------------------------
@ -23,7 +21,7 @@ You can make pull request to the xml document. We are looking for comments from
IETF Internet-Draft
-------------------
- [Version 6 published as Internet-Draft](https://datatracker.ietf.org/doc/draft-dulaunoy-dnsop-passive-dns-cof/) - April 8, 2019
- [Version 7 published as Internet-Draft](https://datatracker.ietf.org/doc/draft-dulaunoy-dnsop-passive-dns-cof/) - June 25, 2020
Users and Use-cases
@ -32,6 +30,8 @@ Users and Use-cases
* [CERT.at](https://pdns.cert.at)
* [Farsight](https://farsightsecurity.com)
* [CIRCL](https://www.circl.lu/services/passive-dns/)
* [D4 Project Passive DNS](https://www.d4-project.org/2019/05/28/passive-dns-tutorial.html)
* [balboa](https://github.com/DCSO/balboa)
* 360CN?
* ...

15
i-d/pdns-qof.xml
View file

@ -50,7 +50,7 @@
<?rfc subcompact="no" ?>
<!-- keep one blank line between list items -->
<!-- end of list of popular I-D processing instructions -->
<rfc category="info" docName="draft-dulaunoy-dnsop-passive-dns-cof-06" ipr="trust200902">
<rfc category="info" docName="draft-dulaunoy-dnsop-passive-dns-cof-07" ipr="trust200902">
<!-- category values: std, bcp, info, exp, and historic
ipr values: full3667, noModification3667, noDerivatives3667
you can add the attributes updates="NNNN" and obsoletes="NNNN"
@ -129,7 +129,7 @@
</address>
</author>
<date month="April" year="2019" />
<date month="June" year="2020" />
<area>General</area>
<workgroup>Domain Name System Operations</workgroup>
@ -245,10 +245,17 @@ ws = *(
<t>This field returns the last time that the unique tuple (rrname, rrtype, rdata) record has been seen via master file import. The date is expressed in seconds (decimal) since 1st of January 1970 (Unix timestamp). The time zone MUST be UTC. This field is represented as a <xref target="RFC4627">JSON</xref> number.</t>
</section>
<section title="origin">
<t>Specifies the resource origin of the Passive DNS response. This field is represented as a <xref target="RFC1035">Domain Name</xref> (DNS).
<t>Specifies the resource origin of the Passive DNS response. This field is represented as a <xref target="RFC3986">Uniform Resource Identifier</xref> (URI).
</t>
</section>
<section title="time_first_ms">
<t>Same meaning as the field "time_first", with the only difference, that the resolution is in milliseconds since 1st of January 1970 (UTC).
</t>
</section>
<section title="time_last_ms">
<t>Same meaning as the field "time_last", with the only difference, that the resolution is in milliseconds since 1st of January 1970 (UTC).
</t>
</section>
</section>
<section title="Additional Fields Registry">
<t>In accordance with <xref target="RFC6648"/>, designers of new passive DNS applications that would need additional fields can request and register new field name at https://github.com/adulau/pdns-qof/wiki/Additional-Fields.</t>

4
to-submit/draft-dulaunoy-dnsop-passive-dns-cof-07.xml
View file

@ -50,7 +50,7 @@
<?rfc subcompact="no" ?>
<!-- keep one blank line between list items -->
<!-- end of list of popular I-D processing instructions -->
<rfc category="info" docName="draft-dulaunoy-dnsop-passive-dns-cof-06" ipr="trust200902">
<rfc category="info" docName="draft-dulaunoy-dnsop-passive-dns-cof-07" ipr="trust200902">
<!-- category values: std, bcp, info, exp, and historic
ipr values: full3667, noModification3667, noDerivatives3667
you can add the attributes updates="NNNN" and obsoletes="NNNN"
@ -129,7 +129,7 @@
</address>
</author>
<date month="April" year="2019" />
<date month="June" year="2020" />
<area>General</area>
<workgroup>Domain Name System Operations</workgroup>