https://github.com/adulau/pdns-qof

Passive DNS Common Output Format
https://github.com/adulau/pdns-qof

network-security passive-dns

Last synced: 7 months ago
JSON representation

Passive DNS Common Output Format

• Host: GitHub
• URL: https://github.com/adulau/pdns-qof
• Owner: adulau
• Created: 2011-09-23T15:27:18.000Z (about 14 years ago)
• Default Branch: master
• Last Pushed: 2024-08-30T17:42:36.000Z (about 1 year ago)
• Last Synced: 2025-03-07T02:18:59.735Z (7 months ago)
• Topics: network-security, passive-dns
• Language: TeX
• Homepage: https://datatracker.ietf.org/doc/draft-dulaunoy-dnsop-passive-dns-cof/
• Size: 2.46 MB
• Stars: 36
• Watchers: 11
• Forks: 15
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG

Awesome Lists containing this project

README

          
Passive DNS - Common Output Format

==================================

This document describes the output format used between Passive DNS query interface. The output format description

 includes also a common meaning per Passive DNS system.

This format originated as a discussion between Aaron Kaplan, Paul Vixie, Henry Stern and Alexandre Dulaunoy (Adulau) in ~ 2011.

It was submitted to the IETF in 2014 and since then had a few minor updates. The last revision was publish the 11th February 2022.

It is being used by multiple operators of passive DNS services to offer an identical output format for queries to a passive DNS database.

This allows the person issuing the query to combined and/or compare results.

The output format is in JSON.

How to Contribute to the Document

---------------------------------

You can make pull request to the xml document. We are looking for comments from passive DNS developers in order to improve the document.

IETF Internet-Draft

-------------------

- [Latest Version published as Internet-Draft](https://datatracker.ietf.org/doc/draft-dulaunoy-dnsop-passive-dns-cof/) - 05 June 2024

Users and Use-cases

--------------------

  * [CERT.at](https://pdns.cert.at)

  * [Farsight](https://farsightsecurity.com)

  * [CIRCL](https://www.circl.lu/services/passive-dns/)

  * [D4 Project Passive DNS](https://www.d4-project.org/2019/05/28/passive-dns-tutorial.html)

  * [balboa](https://github.com/DCSO/balboa)

  * [mnemonic](https://docs.mnemonic.no/api/services/pdns/02-private_api.html)

  * ... add yours please. Create a pull request to this file please.