blob: a162cf956044c5715ec339bb618e69c897154507 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
|
local_address 127.0.0.1;
local_address 127.0.1.1 24;
local_address 127.0.2.1 255.255.255.0;
local_address 127.0.3.1 0;
local_address ::1;
local_address ::1 112;
local_address ::1 96;
local_address ::1 64;
local_address ::1 48;
local_address ::1 32;
local_address ::1 0;
local_address ::1 ffff::;
run_dir ".";
minfree_bytes 5000000;
interface ./1458044657.pcap.dist;
dataset qtype dns All:null Qtype:qtype queries-only;
dataset rcode dns All:null Rcode:rcode replies-only;
dataset opcode dns All:null Opcode:opcode queries-only;
dataset rcode_vs_replylen dns Rcode:rcode ReplyLen:msglen replies-only;
dataset client_subnet dns All:null ClientSubnet:client_subnet queries-only max-cells=200;
dataset qtype_vs_qnamelen dns Qtype:qtype QnameLen:qnamelen queries-only;
dataset qtype_vs_tld dns Qtype:qtype TLD:tld queries-only,popular-qtypes max-cells=200;
dataset certain_qnames_vs_qtype dns CertainQnames:certain_qnames Qtype:qtype queries-only;
dataset client_subnet2 dns Class:query_classification ClientSubnet:client_subnet queries-only max-cells=200;
dataset client_addr_vs_rcode dns Rcode:rcode ClientAddr:client replies-only max-cells=50;
dataset chaos_types_and_names dns Qtype:qtype Qname:qname chaos-class,queries-only;
dataset idn_qname dns All:null IDNQname:idn_qname queries-only;
dataset edns_version dns All:null EDNSVersion:edns_version queries-only;
dataset edns_bufsiz dns All:null EDNSBufSiz:edns_bufsiz queries-only;
dataset do_bit dns All:null D0:do_bit queries-only;
dataset rd_bit dns All:null RD:rd_bit queries-only;
dataset tc_bit dns All:null TC:tc_bit any;
dataset idn_vs_tld dns All:null TLD:tld queries-only,idn-only;
dataset ipv6_rsn_abusers dns All:null ClientAddr:client queries-only,aaaa-or-a6-only,root-servers-net-only max-cells=50;
dataset transport_vs_qtype dns Transport:transport Qtype:qtype queries-only;
dataset client_port_range dns All:null PortRange:dns_sport_range queries-only;
dataset client_port dns All:null Port:dns_source_port any;
dataset direction_vs_ipproto ip Direction:ip_direction IPProto:ip_proto any;
dataset ip_version ip All:null Version:ip_version any;
dataset dns_ip_version dns All:null Version:dns_ip_version any;
dataset qclass dns All:null Class:qclass any;
dataset qname dns All:null Name:qname any;
dataset qr_aa_bits dns Direction:ip_direction QRAABits:qr_aa_bits any;
dataset server dns All:null IP:server any;
dataset second_ld_vs_rcode dns Rcode:rcode SecondLD:second_ld replies-only max-cells=50;
dataset third_ld_vs_rcode dns Rcode:rcode ThirdLD:third_ld replies-only max-cells=50;
dataset label_count dns All:null LabelCount:label_count any;
output_format XML;
output_format JSON;
tld_list ./1458044657.tld_list.dist;
client_v4_mask 255.255.255.255;
|
