[nsp-sec] Fwd: New DNSParse feature

[Russell Fulton]

Begin forwarded message:

> From: Bojan Zdrnja <bzdr001 at aucklanduni.ac.nz>
> Date: 29 April 2009 7:06:15 AM
> To: Russell Fulton <r.fulton at auckland.ac.nz>
> Subject: New DNSParse feature
>
> Hi Russell,
>
> This is a copy of the e-mail I sent to two closed security mailing
> lists. Feel free to share this with groups you think can benefit (such
> as REN-ISAC etc).
> I think this new feature I added is pretty cool :)
>
> Bojan
>
> -- copy of e-mail starts here --
>
> Hi all,
>
> I'm very happy to announce a new DNSParse feature (still in BETA
> though): alert notification.
>
> This feature allows you to register a keyword with the system. When
> importing new data, the system will check if there is a query or
> response that matched your keyword _and_ if the record has not been
> seen previously it will e-mail you the results.
>
> I believe that this feature will be very usable in cases when you want
> to monitor certain domains (for example, all domains with the keyword
> "swine"), or even if certain records have changed (if you enter the
> whole host name, such as isc.sans.org, the agent will notify you only
> when it changes, since this particular record is already in the
> database). You can enter IP addresses as well.
>
> The main import process happens every 8 hours and you will receive
> e-mails only if something new matched your keyword.
>
> The subscription page is available at
> https://dnsparse.insec.auckland.ac.nz/dns/alert.html
>
> Credentials are same as for the main site (username: dnsparse,
> password: passive)
>
>
> Let me know how you find this feature; I'm working on more new and
> exciting things.
>
>
> Cheers,
>
> Bojan