dnstable 0.14.0

The dnstable suite implements an encoding format for passive DNS data based on MTBL. It consists of a C library, libdnstable, and command line utilities for creating, querying, and merging dnstable data files. This new release 0.14.0 includes:

• Add "+" wildcard character to match single label at beginning or end of
  name.
• Add support for case-sensitive rrset, rdata name queries.
• Multiple performance improvements for time filtered queries.
• Improve performance of rrtype filtered queries through early filtering.
• Add query statistics API.
• Add support for source info metadata.
• dnstable_lookup: Add "case sensitive" (-C) query flag.
• dnstable_lookup: Add "count results" (-n) flag.
• dnstable_lookup: Add "time limit" (-t) option.
• dnstable_lookup: Add stats output (-s) and stats interval (-i) options.
• Fix building shared libraries on windows/Cygwin.

A source tar file is available at https://dl.farsightsecurity.com/dist/dnstable/dnstable-0.14.0.tar.gz
SHA256: 9a210e3b1a7afda2afb74b170efcd2c8e59ceef2bab3c2ba53ab23d1acf9def2

dnstable 0.13.2 released

The dnstable suite implements an encoding format for passive DNS data based on MTBL. It consists of a C library, libdnstable, and command line utilities for creating, querying, and merging dnstable data files. This new release 0.13.2 includes:

• Fix bug handling short rdata entry keys in IPv6 range queries.
• Efficiency improvements in string handling code and IP range queries.
• Fix use of buggy base32 decoding from wdns in rrtype bitmap test program.

A source tar file is available at https://dl.farsightsecurity.com/dist/dnstable/dnstable-0.13.2.tar.gz
SHA256: f04dcede07dcf4c96aa46c15328be829cb8df30d17b93d55a0c527bb65aad65f

dnstable 0.13.1 release

dnstable, the encoding library with utilities for passive DNS data, was released as version 0.13.1. The changes include:

• Add RP, NXT, and NSEC to rdata name type list for matching rdata names.

Download: https://dl.farsightsecurity.com/dist/dnstable/dnstable-0.13.1.tar.gz
sha256: cd2e49b2820c9db3baf88864ecc983fdc76caa8cfe2c9d7a1e3f73e6659ee27c

dnstable 0.13.0 release

dnstable, the encoding library with utilities for passive DNS data, was released as version 0.13.0. The changes include:

• dnstable_lookup: add new command-line options -A, -a, -B, -b, and -c for time-fenced lookups.
• Optimize time filtered searches on fileset sources with a filtering query using the subset of files which may contribute to matching results.
• Fix duplication of results in unaggregated name prefix or rdata name suffix searches.
• Fix improper skipping of results in IP range or prefix searches.
• Fix return of non-name results in rdata name searches.
• Fix decode_rdata() rdata length for Big Endian.

This requires wdns 0.11.0 and mtbl 1.5.0.

Download: https://dl.farsightsecurity.com/dist/dnstable/dnstable-0.13.0.tar.gz
sha256: d92a05b432493fc0b2b2e0a6dac0ca60c2283c725d3225c5e13faa8d227b9fb3

dnstable 0.12.0 released

dnstable, the encoding library with utilities for passive DNS data, was released as version 0.12.0. The changes include:

• Implement indexing using RRtypes for ENTRY_TYPE_RRSET_NAME_FWD and ENTRY_TYPE_RDATA_NAME_REV entries. This uses RFC6840 RRtype bitmaps as the primary data structure.

• Added support for dnstable entries encoding version information and time metadata.

• The version entries, time metadata, and rrtype index information are generated by an updated dnstable-convert. Files generated by the old dnstable-convert will be processed as they were with the previous dnstable versions i.e., the new entry types and rrset index information will be absent.

• Use ./configure --with-coverage option to build with code coverage and make targets: clean-coverage to remove the coverage data and results and report-coverage to generate LCOV report (after running the code such as with "make check").

• Add -R flag to dnstable_dump and dnstable_lookup to add raw rdata representation to outputs.

• Add long options to dnstable_dump to fix bug in not accepting some options properly.

• Fix dnstable_lookup usage output.

• Refactor time formatters and fix compiler warnings.

• Ignore entries which fail decoding for use with legacy empty data.

• Miscellaneous documentation improvements.

Source code tarball is available at https://dl.farsightsecurity.com/dist/dnstable/dnstable-0.12.0.tar.gz
SHA256: 521a8e7a2edf2ef650f651ae07658ca4b46a981c76a08db103e5293239dc6b1c

dnstable 0.11.2 release

dnstable, the encoding library with utilities for passive DNS data, was released as version 0.11.2.

• Fix memory leaks while skipping rows of data during offset processing.
• Fix minor leak in dnstable_lookup printing.
• Add more dnstable_lookup tests.

Source download: https://dl.farsightsecurity.com/dist/dnstable/dnstable-0.11.2.tar.gz
SHA256: ea6bbae9bcc63b872381a40005bda6a4daa789395e3ed56216bf1ba421cd2ab2

dnstable 0.11.0

dnstable, the encoding library with utilities for passive DNS data, version 0.11.0, was released. This release adds functionality enabling unaggregated query results, the skipping of query results, and date and rdata presentation options for JSON formatted entries. In detail:

• Fix bug in raw rdata queries with rrtype specified.
• Add functionality for unaggregated query results.
• Add ability to skip query results.
• Add options for date and rdata presentation in JSON formatted entries.
• Treat RRTYPE "TYPE255" as an alias for "ANY", since 255 is the code for "ANY".

Download: https://dl.farsightsecurity.com/dist/dnstable/dnstable-0.11.0.tar.gz

SHA256: ccbe3f313d7cac7b156e61e24eebcdc4b817a089f986dd3f58dc75524a18de7e

dnstable 0.10.2

dnstable, the encoding library with utilities for passive DNS data, version 0.10.2, was released. This release features a performance remedy for wildcard queries. In detail:

• Fix ordering for wildcard, processing contiguous memory first.

Download: https://dl.farsightsecurity.com/dist/dnstable/dnstable-0.10.2.tar.gz

sha256: 6c335f6e578bd5f743a6944d64b6dd4d32c0fe282efcdcf61f1f8ea1ec133e24

dnstable 0.10.1

dnstable, the encoding library with utilities for passive DNS data, version 0.10.1, was released. This release features portability fixes. In detail:

• Check for endian.h headers.
• Add sys/socket.h include.
• Expunge protobuf-c references.
• Correct libyajl include path.
• Add libmtbl dependency for provided pkg-config file.

Download: https://dl.farsightsecurity.com/dist/dnstable/dnstable-0.10.1.tar.gz

sha256: a38ee2bb4121b8abd3689c7095c6d7af976591630ae55e1e5783d1ec710a51a8

dnstable 0.10.0 released

dnstable, the encoding library with utilities for passive DNS data, version 0.10.0 has been released. The changes include:

• Remove dnstable_convert into a separate repo to simplify dependencies. See https://github.com/farsightsec/dnstable-convert/
• Add generated man pages to source.
• Document dnstable_entry_set_iszone().
• Improve dnstable_reader(3) documentation.
• Add JSON output (-j option) to dnstable_lookup.
• Add test cases based on dnstable_lookup.
• Only encode RDATA so the hostname is at the beginning for NS, CNAME, DNAME, PTR, MX, and SRV record types.
• Fix byteorder macros for macOS.

A source tarball is available at https://dl.farsightsecurity.com/dist/dnstable/dnstable-0.10.0.tar.gz
SHA256: 98431ae75c1defb53433ea4d71ce89df2e9c3e7a5dfd54de0b82b86b1d378638