Skip to content

Commit

Permalink
Merge pull request #1120 from david-fritz-gravwell/issue-1114
Browse files Browse the repository at this point in the history
add note about gating the DNS module.
  • Loading branch information
ashnwade authored Sep 24, 2024
2 parents 3545745 + bc43499 commit ad5ae94
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions search/dns/dns.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,10 @@
The `dns` module can generate an enormous amount of network traffic to your DNS resolver. DNS resolvers may ban you if you generate too many requests in a short amount of time.
```

```{note}
The `dns` module will be disabled if the global configuration `Disable-Network-Script-Functions` is set to true.
```

The `dns` module is used to perform DNS lookups on hostnames and store the result in an enumerated value. The `dns` module can also perform reverse lookups on IP addresses. By default the `dns` module will perform no more than 1024 lookups in a given search. This is to prevent DNS query bursts to your resolver. The module keeps a simple least recently used (LRU) cache of results, so searches with many duplicate values may be well under the lookup limit. You can adjust this limit with the `-l` flag.

The syntax simply takes one or more pairs of values, an enumerated value to perform the lookup on, and a target enumerated value to produce. For example, to perform a lookup on the EV "Computer", generating the result IP in an EV "ip":
Expand Down

0 comments on commit ad5ae94

Please sign in to comment.