1 files changed, 93 insertions, 0 deletions
diff --git a/rdns_scan/zmap4rdns/src/zmap_schema.py b/rdns_scan/zmap4rdns/src/zmap_schema.py
new file mode 100644
index 0000000..05e8423
--- /dev/null
+++ b/rdns_scan/zmap4rdns/src/zmap_schema.py
@@ -0,0 +1,93 @@
+from zschema.leaves import *
+from zschema.compounds import *
+import zschema.registry
+
+zmap_base = Record({
+    "saddr":IPv4Address(),
+    "saddr_raw":Unsigned32BitInteger(),
+    "daddr":IPv4Address(),
+    "daddr_raw":Unsigned32BitInteger(),
+    "ipid":Unsigned32BitInteger(),
+    "ttl":Unsigned32BitInteger(),
+    "classification":String(),
+    "success":Unsigned32BitInteger(),
+    "app_success":Unsigned32BitInteger(),
+    "repeat":Unsigned32BitInteger(),
+    "cooldown":Unsigned32BitInteger(),
+    "timestamp_str":String(),
+    "timestamp_ts":Unsigned32BitInteger(),
+    "timestamp_us":Unsigned32BitInteger(),
+    "icmp_responder":String(),
+    "icmp_type":Unsigned32BitInteger(),
+    "icmp_code":Unsigned32BitInteger(),
+    "icmp_unreach_str":String(),
+    "sport":Unsigned32BitInteger(),
+    "dport":Unsigned32BitInteger(),
+    "data":String(),
+    "length":Unsigned32BitInteger(),
+
+})
+
+zmap_upnp = Record({
+    "type":String(),
+    "server":AnalyzedString(),
+    "location":AnalyzedString(),
+    "usn":String(),
+    "st":String(),
+    "ext":String(),
+    "cache_control":String(),
+    "x_user_agent":String(),
+    "agent":String(),
+    "date":String(),
+}, extends=zmap_base)
+
+zschema.registry.register_schema("zmap-upnp", zmap_upnp)
+
+
+dns_question = SubRecord({
+    "name":String(),
+    "qtype":Unsigned32BitInteger(),
+    "qtype_str":String(),
+    "qclass":Unsigned32BitInteger(),
+})
+
+dns_answer = SubRecord({
+  "name":String(),
+  "type":Unsigned32BitInteger(),
+  "type_str":String(),
+  "class":Unsigned32BitInteger(),
+  "ttl":Unsigned32BitInteger(),
+  "rdlength":Unsigned32BitInteger(),
+  "rdata_is_parsed":Unsigned32BitInteger(),
+  "rdata":String(), # hex
+})
+
+zmap_dns = Record({
+    "qr":Unsigned16BitInteger(),
+    "rcode":Unsigned16BitInteger(),
+    "dns_id":Unsigned32BitInteger(),
+    "dns_rd":Unsigned32BitInteger(),
+    "dns_tc":Unsigned32BitInteger(),
+    "dns_aa":Unsigned32BitInteger(),
+    "dns_opcode":Unsigned32BitInteger(),
+    "dns_qr":Unsigned32BitInteger(),
+    "dns_rcode":Unsigned32BitInteger(),
+    "dns_cd":Unsigned32BitInteger(),
+    "dns_ad":Unsigned32BitInteger(),
+    "dns_z":Unsigned32BitInteger(),
+    "dns_ra":Unsigned32BitInteger(),
+    "dns_qdcount":Unsigned32BitInteger(),
+    "dns_ancount":Unsigned32BitInteger(),
+    "dns_nscount":Unsigned32BitInteger(),
+    "dns_arcount":Unsigned32BitInteger(),
+    "dns_questions":ListOf(dns_question),
+    "dns_answers":ListOf(dns_answer),
+    "dns_authorities":ListOf(dns_answer),
+    "dns_additionals":ListOf(dns_answer),
+    "dns_unconsumed_bytes":Unsigned32BitInteger(),
+    "dns_parse_err":Unsigned32BitInteger(),
+    "raw_data":String(),
+    "udp_len":Unsigned32BitInteger(),
+}, extends=zmap_base)
+
+zschema.registry.register_schema("zmap-dns", zmap_dns)