Search International and National Patent Collections

1. (WO2017039602) COLLECTING DOMAIN NAME SYSTEM TRAFFIC

Pub. No.:    WO/2017/039602    International Application No.:    PCT/US2015/047691
Publication Date: Fri Mar 10 00:59:59 CET 2017 International Filing Date: Tue Sep 01 01:59:59 CEST 2015
IPC: H04L 29/06
H04L 12/22
Applicants: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Inventors: ARNELL, Simon Ian
CASASSA MONT, Marco
BERESNA, Yolanta
Title: COLLECTING DOMAIN NAME SYSTEM TRAFFIC
Abstract:
Examples relate to collecting domain name system traffic. In one example, a computing device may: receive, from a first intermediary network device, a DNS query packet that was sent by a client computing device operating on a private network, the DNS query packet specifying i) a query domain name, and ii) a source address that specifies the client computing device; store, in a data storage device, a query record specifying the query domain name and the source address specified by the DNS query packet; receive, from a second intermediary network device, a DNS response packet; determine that the DNS response packet specifies a response domain name that matches the query domain name; in response to the determination, extract, from the DNS response packet, a resolved address that corresponds to the response domain name; and store, in the query record, the resolved address specified by the DNS response packet.