search

firnsy / echidna-refresh

Architectural PoC for Echidna framework.
2 stars 2 forks source link

Feature: pdns drill down to find client IPs #2

Open gamelinux opened 11 years ago

gamelinux commented 11 years ago

When you click on a log line in the "NSM Data/Passive DNS" view, it should expand to show more detailed records of which client IPs did the querys...

Might limit to the XX last entries, with an option to fetch all from the DB?

larsx2 commented 11 years ago

To fetch exactly what from the database? Any specifics on how and what data from the clients would be useful?

gamelinux commented 11 years ago

The aggregated view should show (Missing count today): First Seen | Last Seen | Query | Type | Answer | TTL | Count

When you click on an entry, it should expand and display the IP of the client and server from the DB etc, aggregated again:

First Seen | Last Seen | Client IP | Server IP | TTL | Count

As we know the "Query | Type | Answer" for the entries in questions, we dont need to display that once more

We can even take it one step further, click on the aggregated client info, and get a more detailed view of the last 10,20,30,40.... entries?