Stephane Bortzmeyer wrote: > On Tue, Mar 17, 2015 at 10:56:44PM -0400, > Robert Edmonds <edmo...@mycre.ws> wrote > a message of 34 lines which said: > > > Passive DNS Replication -- A mechanism to collect and store resource > > records by observing responses, usually those sent by authoritative > > servers. Passive DNS databases can be used to recover DNS records > > which were served in the past, and may allow certain kinds of > > "inverse" searches of the stored records. Sometimes shortened to > > "passive DNS". > > My contribution to the painting of the bikeshed: I would drop "usually > those sent by authoritative servers" because the responses can be sent > by servers which are not authoritative for this specific zone (that's > why DNSDB indicates the bailiwick of the response).
Hi, Stephane: I was actually trying to draw a distinction between "above the recursive" and "below the recursive" collection, which is shown graphically in the slide 13 set in [0]. The work in [1] is an example of a system that collected both types of data. Maybe the following is better: Passive DNS Replication -- A mechanism to collect and store resource records by observing responses, usually those received by recursive servers. Passive DNS databases can be used to recover DNS records which were served in the past, and may allow certain kinds of "inverse" searches of the stored records. Sometimes shortened to "passive DNS". Thanks! [0] http://www.enyo.de/fw/software/dnslogger/first2005-interactive.pdf [1] http://www.cc.gatech.edu/~ynadji3/docs/pubs/dnsnoise-dsn2014.pdf -- Robert Edmonds _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
