Welcome to woohoo pDNS’ documentation!

Contents:

• Installation
  • Timing
  • Requirements
  • Overview
  • Installing
• Using woohoo pDNS
  • Command Line Interface (CLI)
  • RESTful
  • Python API
• woohoo pDNS’ ToDo list or whishlist
  • Some things I am considering to add
  • Some things I am looking for from the community
• Contributing
  • Managing dependencies
  • Implementing an Importer
• Support
• woohoo_pdns
  • woohoo_pdns package

Indices and tables

• Index

• Module Index

• Search Page

What woohoo pDNS is

woohoo pDNS is a database to store and query passive DNS data. It is written in Python 3 and aims to support data collected by the SiLK NetSA security suite although it can work with other source data as well.

In addition, it has a Web GUI component that can be installed separately.

If you want to know in more detail what (a) passive DNS (data(base)) is, the FAQ on the Farsight Security website is a valid resource to read up on the topic.

What woohoo pDNS is not

woohoo pDNS is not optimised for speed. It is geared towards small-ish installations (read: up to a couple of thoundand inserts per minute?).

Benefits

• Uses SQLAlchemy for the database stuff: let the pros handle SQL

• Adheres to the Passive DNS - Common Output Format.

• Provides a RESTful interface