Hi Folks, We have an update to draft which we hope captures all the comments to-date.
- Make all data items in Q/R, QuerySignature and Malformed Message arrays optional - Re-structure the FilePreamble and ConfigurationParameters into BlockParameters - BlockParameters has separate Storage and Collection Parameters - Storage Parameters includes information on what optional fields are present, and flags specifying anonymisation or sampling - Addresses can now be stored as prefixes. - Switch to using a variable sub-second timing granularity - Add response bailiwick and query response type - Add specifics of how to record malformed messages - Add implementation guidance - Improve terminology and naming consistency There are still a number of ‘QUESTIONS’ in the draft that we would appreciate feedback on. Regards Sara. > On 22 Feb 2018, at 12:27, internet-dra...@ietf.org wrote: > > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Domain Name System Operations WG of the IETF. > > Title : C-DNS: A DNS Packet Capture Format > Authors : John Dickinson > Jim Hague > Sara Dickinson > Terry Manderson > John Bond > Filename : draft-ietf-dnsop-dns-capture-format-05.txt > Pages : 62 > Date : 2018-02-22 > > Abstract: > This document describes a data representation for collections of DNS > messages. The format is designed for efficient storage and > transmission of large packet captures of DNS traffic; it attempts to > minimize the size of such packet capture files but retain the full > DNS message contents along with the most useful transport metadata. > It is intended to assist with the development of DNS traffic > monitoring applications. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-dnsop-dns-capture-format/ > > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-dnsop-dns-capture-format-05 > https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-dns-capture-format-05 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=draft-ietf-dnsop-dns-capture-format-05 > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > DNSOP mailing list > DNSOP@ietf.org > https://www.ietf.org/mailman/listinfo/dnsop _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop