Welcome to woohoo pDNS’ documentation!¶
Indices and tables¶
What woohoo pDNS is¶
woohoo pDNS is a database to store and query passive DNS data. It is written in Python 3 and aims to support data collected by the SiLK NetSA security suite although it can work with other source data as well.
In addition, it has a Web GUI component that can be installed separately.
If you want to know in more detail what (a) passive DNS (data(base)) is, the FAQ on the Farsight Security website is a valid resource to read up on the topic.
What woohoo pDNS is not¶
woohoo pDNS is not optimised for speed. It is geared towards small-ish installations (read: up to a couple of thoundand inserts per minute?).
Benefits¶
Uses SQLAlchemy for the database stuff: let the pros handle SQL
Adheres to the Passive DNS - Common Output Format.
Provides a RESTful interface