From bbdf71b68341e17a0dc18d7de8ebadbf1b58da2b Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Sat, 7 Dec 2013 09:55:50 +0100 Subject: [PATCH] zone_time_first and zone_time_last added as additional field. Some of Passive DNS can also import data from zone files. These fields are needed are the time accuracy is quite different from standard Passive DNS. --- i-d/pdns-qof.xml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/i-d/pdns-qof.xml b/i-d/pdns-qof.xml index f83267c..bac075d 100644 --- a/i-d/pdns-qof.xml +++ b/i-d/pdns-qof.xml @@ -213,7 +213,13 @@ The document does not describe the protocol (e.g. whois, HTTP REST or XMPP) nor Implementations MAY support the following fields:
This field returns the sensor information where the record was seen. The sensor_id is an opaque byte string as defined by RFC 5001 in section 2.3. -
+ +
+ This field returns the first time that the unique tuple (rrname, rrtype, rdata) record has been seen via zone file import. The date is expressed in seconds (decimal ascii) since 1st of January 1970 (unix timestamp). The time zone MUST be UTC. +
+
+ This field returns the last time that the unique tuple (rrname, rrtype, rdata) record has been seen via zone file import. The date is expressed in seconds (decimal ascii) since 1st of January 1970 (unix timestamp). The time zone MUST be UTC. +