From daeb9a1a4ae927a717040b86a4c51a97a955a9db Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Wed, 21 Mar 2012 17:32:11 +0100 Subject: [PATCH] Simple dnscap patch to have epoch date as output --- pdns-server/README.md | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/pdns-server/README.md b/pdns-server/README.md index 3f02345..3cec9c8 100644 --- a/pdns-server/README.md +++ b/pdns-server/README.md @@ -10,7 +10,8 @@ The data store format is described in ./doc/datastore-format.txt Installation ------------ -This is the minimal set to run a standalone passive-dns. +This is the minimal set to run a standalone passive-dns using dnscap +as a source for the DNS packets. * Install [redis](http://www.redis.io/). * Start ./src/redis-server @@ -25,3 +26,13 @@ This is the minimal set to run a standalone passive-dns. The install process will be automated in the next release. +dnscap +------ + +Patch dnscap.c (from branches/wessels) to output the date in epoch format. + +- strftime(when, sizeof when, "%Y-%m-%d %T", tm); ++ strftime(when, sizeof when, "%s", tm); + +When having multiple flows of DNS queries, it's better to convert the date +as soon as possible.