Multicast DNS Test Suite Data Sheet

Test Suite: Multicast DNS Test Suite

Direction: Server

Multicast DNS (mDNS) and its companion technology DNS-Based Service Discovery (DNS-SD) were created to provide IP networking with ease-of-use and auto-configuration. Multicast DNS borrows heavily from the existing DNS protocol, using the existing DNS message structure, name syntax, and resource record types.

Used specifications

Specification Title Notes
rfc1035 Domain Names – Implementation and Specification Anomaly only
rfc1183 New DNS RR Definitions
rfc1706 DNS NSAP Resource Records
rfc1712 DNS Encoding of Geographical Location
rfc1876 A Means for Expressing Location Information in the Domain Name System
rfc1995 Incremental Zone Transfer in DNS Anomaly only
rfc1996 A Mechanism for Prompt Notification of Zone Changes (DNS NOTIFY) Anomaly only
rfc2136 Dynamic Updates in the Domain Name System (DNS UPDATE) Anomaly only
rfc2163 Using the Internet DNS to Distribute MIXER Conformant Global Address Mapping (MCGAM)
rfc2230 Key Exchange Delegation Record for the DNS
rfc2535 Domain Name System Security Extensions Anomaly only
rfc2782 A DNS RR for specifying the location of services (DNS SRV)
rfc2874 DNS Extensions to Support IPv6 Address Aggregation and Renumbering Obsolete
rfc2930 Secret Key Establishment for DNS (TKEY RR) Anomaly only
rfc3123 A DNS RR Type for Lists of Address Prefixes (APL RR)
rfc3403 Dynamic Delegation Discovery System (DDDS) Part Three: The Domain Name System (DNS) Database
rfc3596 DNS Extensions to Support IP Version 6
rfc3629 UTF-8, a transformation format of ISO 10646
rfc3986 Uniform Resource Identifier (URI): Generic Syntax
rfc4025 A Method for Storing IPsec Keying Material in DNS
rfc4034 Resource Records for the DNS Security Extensions
rfc4255 Using DNS to Securely Publish Secure Shell (SSH) Key Fingerprints Anomaly only
rfc4398 Storing Certificates in the Domain Name System (DNS) Anomaly only
rfc4431 The DNSSEC Lookaside Validation (DLV) DNS Resource Record Obsolete (Anomaly only)
rfc4701 A DNS Resource Record (RR) for Encoding Dynamic Host Configuration Protocol (DHCP) Information (DHCID RR) Anomaly only
rfc5001 DNS Name Server Identifier (NSID) Option
rfc5155 DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
rfc5936 DNS Zone Transfer Protocol (AXFR) Anomaly only
rfc6376 DomainKeys Identified Mail (DKIM) Signatures Anomaly only
rfc6672 DNAME Redirection in the DNS
rfc6698 The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA Anomaly only
rfc6742 DNS Resource Records for the Identifier-Locator Network Protocol (ILNP)
rfc6762 Multicast DNS mDNS specification
rfc6891 Extension Mechanisms for DNS (EDNS(0))
rfc6975 Signaling Cryptographic Algorithm Understanding in DNS Security Extensions (DNSSEC)
rfc7043 Resource Records for EUI-48 and EUI-64 Addresses in the DNS
rfc7208 Sender Policy Framework (SPF) for Authorizing Use of Domains in Email, Version 1
rfc7314 Extension Mechanisms for DNS (EDNS) EXPIRE Option
rfc7344 Automating DNSSEC Delegation Trust Maintenance Anomaly only
rfc7477 Child-to-Parent Synchronization in DNS
rfc7553 The Uniform Resource Identifier (URI) DNS Resource Record
rfc7828 The edns-tcp-keepalive EDNS0 Option Anomaly only
rfc7830 The EDNS(0) Padding Option
rfc7871 Client Subnet in DNS Queries
rfc7873 Domain Name System (DNS) Cookies
rfc7901 CHAIN Query Requests in DNS
rfc8005 Host Identity Protocol (HIP) Domain Name System (DNS) Extension Anomaly only
rfc8145 Signaling Trust Anchor Knowledge in DNS Security Extensions (DNSSEC)
rfc8162 Using Secure DNS to Associate Certificates with Domain Names for S/MIME Anomaly only
rfc8490 DNS Stateful Operations Anomaly only
rfc8659 DNS Certification Authority Authorization (CAA) Resource Record
rfc8764 Apple’s DNS Long-Lived Queries Protocol
rfc8765 DNS Push Notifications
rfc8777 DNS Reverse IP Automatic Multicast Tunneling (AMT) Discovery
rfc8914 Extended DNS Errors
rfc8945 Secret Key Transaction Authentication for DNS (TSIG) Anomaly only
rfc8976 Message Digest for DNS Zones Anomaly only
draft-bellis-dnsop-edns-tags-01 DNS EDNS Tags
draft-cheshire-edns0-owner-option-01 EDNS0 OWNER Option
draft-durand-doa-over-dns-03 DOA over DNS Anomaly only
draft-eastlake-kitchen-sink-02 The Kitchen Sink Resource Record
draft-ietf-dnsop-svcb-https-02 Service binding and parameter specification via the DNS (DNS SVCB and HTTPS RRs)
draft-ietf-nimrod-dns-01 DNS Resource Records for Nimrod Routing Architecture
draft-sekar-dns-ul-02 Dynamic DNS Update Leases
draft-wijngaards-dnsop-trust-history-02 DNSSEC Trust Anchor History Service Anomaly only
af-dans-0152.000 ATM Name System V2.0 Anomaly only
identifying-dns-traffic2 Umbrella – Identifying DNS traffic Anomaly only
ini1999-19 Deploying DNSSEC Without a Signed Root. Technical Report 1999-19, Information Networking Institute, Carnegie Mellon University, April 2004. Anomaly only

Tool-specific information

Tested messages Specifications Notes
mDNS Query rfc6762 A standard query request u0026 response.
Supported features Specification Notes
UDP multicast messages over IPv4 network rfc6762 Multicast DNS with UDP over IPv4 network.
UDP multicast messages over IPv6 network rfc6762 Multicast DNS with UDP over IPv6 network.
Unsupported features Specification Notes
Unicast response messages rfc6762 Suite doesn’t support sending unicast response messages to mDNS requests.
RRSIG digest u0026 validation rfc4034 Suite doesn’t support calculating or validation of DNSSEC Signatures.
TSIG digest u0026 validation rfc8945 Suite doesn’t support calculating or validation of DNS Transaction Signatures.
SIG(0) digest u0026 validation rfc2931 Suite doesn’t support calculating or validation of DNS Request and Transaction Signatures ( SIG(0)s ).
SSH key fingerprints rfc4255 Suite doesn’t support generating SSH key fingerprints.
DHCID digest u0026 validation rfc4701 Suite doesn’t support calculating DHCID digest.
ZONEMD digest u0026 validation rfc8976 Suite doesn’t support calculating message digest for DNS zones
DNS message specific timeout parameters rfc7314, rfc7828, rfc8490 Defensics uses its own connection timeout mechanism and doesn’t use timeout values from DNS message specific parameters.