Compacted-DNS (C-DNS): A Format for DNS Packet Capture

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 79
Abstract: This document describes a data representation for collections of DNS messages. The format is designed for efficient storage and transmission of large packet captures of DNS traffic; it attempts to minimize the size of such packet capture files but retain the full DNS message contents along with the most useful transport metadata. It is intended to assist with the development of DNS traffic- monitoring applications.
Publication Date: 2019-09-01
Status Note: Proposed Standard
DOI: 10.17487/RFC8618
Link: https://doi.org/10.17487/RFC8618
Author(s): John Dickinson
Jim Hague
Sara Dickinson
Terry Manderson
John Bond
Keyword(s): DNS

Latest version of IETF RFC 8618

Document Versions — IETF RFC 8618

▶ IETF RFC 8618 (2019-09-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

10.1109-IEEESTD.2018.8277153 — POSIX EXTERNAL
tcpdump.org, "Manpage of PCAP", July 2018, < https://www.tcpdump.org/manpages/pcap.3pcap.html >. EXTERNAL
tcpdump.org, "Manpage of PCAP-FILTER", November 2017, < https://www.tcpdump.org/manpages/pcap-filter.7.html >. EXTERNAL
IETF RFC 792 [Active*]
IETF RFC 1035 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 4443 [Active*]
IETF RFC 6891 [Active*]
IETF RFC 7049 [Superseded*]
IETF RFC 7858 [Active*]
IETF RFC 8094 [Active*]
IETF RFC 8126 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 8484 [Active*]
IETF RFC 8610 [Active*]

Bibliographic Reference(s)

GITHUB.DNS-OARC.PacketQ — packetq EXTERNAL
GITHUB.kubo.snzip — snzip EXTERNAL
GITHUB.mmarkdown.mmark — mmark EXTERNAL
GITHUB.pcapng.pcapng — pcapng EXTERNAL
IEEE.STD802.1Q — 802.1Q EXTERNAL
IETF draft-daley-dnsxml-00 [Active*]
IETF.draft-ietf-dprive-bcp-op-03 — DNS-Priv-Svc EXTERNAL
IETF.draft-ietf-dprive-rfc7626-bis-00 — DNS-Priv-Cons EXTERNAL
"snappy", < https://google.github.io/snappy/ >. EXTERNAL
NLnet Labs, "NSD", 2019, < https://www.nlnetlabs.nl/projects/nsd/about/ >. EXTERNAL
IANA, "DNS CLASSes", < https://www.iana.org/assignments/dns-parameters/ >. EXTERNAL
"Zstandard - Real-time data compression algorithm", < https://facebook.github.io/zstd/ >. EXTERNAL
DNS-OARC, "DNSCAP", 2018, < https://www.dns-oarc.net/tools/dnscap >. EXTERNAL
Wessels, D. and J. Lundstrom, "DSC", 2016, < https://www.dns-oarc.net/tools/dsc >. EXTERNAL
"dnstap", 2016, < https://dnstap.info/ >. EXTERNAL
Google LLC, "Protocol Buffers", < https://developers.google.com/protocol-buffers/ >. EXTERNAL
"Knot DNS", < https://www.knot-dns.cz/ >. EXTERNAL
"PCAP", 2019, < https://www.tcpdump.org/ >. EXTERNAL
"gzip", < https://www.gzip.org/ >. EXTERNAL
IANA, "Resource Record (RR) TYPEs", < https://www.iana.org/assignments/dns-parameters/ >. EXTERNAL
IANA, "DNS OpCodes", < https://www.iana.org/assignments/dns-parameters/ >. EXTERNAL
IANA, "Code Fields", < https://www.iana.org/assignments/icmp-parameters/ >. EXTERNAL
IANA, "DNS RCODEs", < https://www.iana.org/assignments/dns-parameters/ >. EXTERNAL
"XZ Utils", < https://tukaani.org/xz/ >. EXTERNAL
"LZ4", < https://lz4.github.io/lz4/ >. EXTERNAL
IANA, "ICMPv6 "Code" Fields", < https://www.iana.org/assignments/icmpv6-parameters/ >. EXTERNAL
ICANN, "Recommendations on Anonymization Processes for Source IP Addresses Submitted for Future Analysis", August 2018, < https://www.icann.org/en/system/files/files/ rssac-040-07aug18-en.pdf >. EXTERNAL
The Apache Software Foundation, "Apache Avro(TM)", 2019, < https://avro.apache.org/ >. EXTERNAL
"dnstap schema", commit d860ec1, November 2016, < https://github.com/dnstap/dnstap.pb/blob/master/ dnstap.proto >. EXTERNAL
DNS-OARC, "DITL", 2018, < https://www.dns-oarc.net/oarc/data/ditl >. EXTERNAL
IETF RFC 5077 [Superseded*]
IETF RFC 7413 [Active*]
IETF RFC 7626 [Superseded*]
IETF RFC 8259 [Active*]
IETF RFC 8427 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8618.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8618, Compacted-DNS (C-DNS): A Format for DNS Packet Capture. Available at https://doi.org/10.17487/RFC8618

Snippet:

IETF RFC 8618, Compacted-DNS (C-DNS): A Format for DNS Packet Capture. Available at https://doi.org/10.17487/RFC8618

HTML (ISO 690 compliant)

Preview:

IETF RFC 8618, Compacted-DNS (C-DNS): A Format for DNS Packet Capture. Available at https://doi.org/10.17487/RFC8618

Snippet:

<span class="citation"><cite>IETF RFC 8618</cite>, Compacted-DNS (C-DNS): A Format for DNS Packet Capture. Available at <a href="https://doi.org/10.17487/RFC8618" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8618</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8618, Compacted-DNS (C-DNS): A Format for DNS Packet Capture
doi: 10.17487/RFC8618
url: https://doi.org/10.17487/RFC8618

Snippet:

<li>
<cite id="bib-rfc8618">IETF RFC 8618</cite>, Compacted-DNS (C-DNS): A Format for DNS Packet Capture
<span class="doi">10.17487/RFC8618</span>
</li>

Referenced By

IETF RFC 8932 [Active*]
IETF RFC 8949 [Active*]