<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE lire:dlf-schema PUBLIC
  "-//LogReport.ORG//DTD Lire DLF Schema Markup Language V1.0//EN"
  "http://www.logreport.org/LDSML/1.1/ldsml.dtd">
<lire:dlf-schema superservice="dns" timestamp="time"
 xmlns:lire="http://www.logreport.org/LDSML/">

 <lire:title>DLF Schema for DNS service</lire:title>
 
 <lire:description>
  <para>Each records in the DNS DLF schema represents a query that was
   made to the DNS server, zone transfers or other types of
   administrative information isn't represented in the schema.
  </para>
 </lire:description>

 <lire:field name="time" type="timestamp" label="Timestamp">
  <lire:description>
   <para>The time at which the query was processed by the server.</para>
  </lire:description>
 </lire:field>

 <lire:field name="requesting_host" type="hostname" label="Client Host">
  <lire:description>
   <para>The host that made the request.</para>
  </lire:description>
 </lire:field>

 <lire:field name="request" type="hostname" label="Requested Name">
  <lire:description>
   <para>The content of the DNS request. DNS queries are usually about
    an hostname. 
   </para>
  </lire:description>
 </lire:field>

 <lire:field name="type" type="string" label="Request's Type">
  <lire:description>
   <para>The record type that was requested. Common DNS record types
    are <type>PTR</type>, <type>A</type>, <type>CNAME</type>, etc.
   </para>
  </lire:description>
 </lire:field>

 <lire:field name="resolver" type="string" label="Recursive Request">
  <lire:description>
   <para>This field contains <constant>recurs</constant> if the
    requests was recursive, that is probably made by a client for
    which we are configured as primary DNS server. Otherwise this
    field contains <constant>norecurs</constant> to denotes that the
    request wasn't recursive. Non-recursive requests are usually made
    by a DNS server which is processing a recursive request from one
    client.
   </para>
  </lire:description>
 </lire:field>

</lire:dlf-schema>
