Re: [DNSOP] DNS terminology: "Passive DNS"

[Robert Edmonds <[e-mail]>]

Stephane Bortzmeyer wrote:
> On Tue, Mar 17, 2015 at 10:56:44PM -0400,
>  Robert Edmonds <[e-mail]> wrote 
>  a message of 34 lines which said:
> 
> >    Passive DNS Replication -- A mechanism to collect and store resource
> >    records by observing responses, usually those sent by authoritative
> >    servers. Passive DNS databases can be used to recover DNS records
> >    which were served in the past, and may allow certain kinds of
> >    "inverse" searches of the stored records. Sometimes shortened to
> >    "passive DNS".
> 
> My contribution to the painting of the bikeshed: I would drop "usually
> those sent by authoritative servers" because the responses can be sent
> by servers which are not authoritative for this specific zone (that's
> why DNSDB indicates the bailiwick of the response).

Hi, Stephane:

I was actually trying to draw a distinction between "above the
recursive" and "below the recursive" collection, which is shown
graphically in the slide 13 set in [0].  The work in [1] is an example
of a system that collected both types of data.

Maybe the following is better:

   Passive DNS Replication -- A mechanism to collect and store resource
   records by observing responses, usually those received by recursive
   servers. Passive DNS databases can be used to recover DNS records
   which were served in the past, and may allow certain kinds of
   "inverse" searches of the stored records. Sometimes shortened to
   "passive DNS".

Thanks!

[0] http://www.enyo.de/fw/software/dnslogger/first2005-interactive.pdf

[1] http://www.cc.gatech.edu/~ynadji3/docs/pubs/dnsnoise-dsn2014.pdf

-- 
Robert Edmonds