"The Codenomicon tools are amazing. Using them is like being attacked by the most relentless adversary who uses every possible method to find flaws in your code
We fixed subtle crash bugs in Samba that had been in the code for over ten years. We would never have found those bugs without the Codenomicon tools.
If you're serious about implementing protocols correctly, you need the Codenomicon tools."
-- Jeremy Allison,
Co Creator of Samba
Products by Protocol
Codenomicon DNS Server Test Tool Data Sheet
- Test tool: Codenomicon DNS Server Test Tool
- Direction: Server
Domain Name Service (DNS) is a protocol originally intended to translate Internet domain names to Internet Protocol (IP) addresses and vice versa, evolved since to provide many additional types of information related to hosts, networks and domains. Since the proper functioning of DNS is vital to many Internet application services such as WWW and email, the dependability of DNS implementations must be verified. This test application can be used to test DNS server implementations for security flaws and robustness problems.
Used specifications
| Specification | Title |
|---|---|
| RFC1034 | Domain Names - Concepts and Facilities |
| RFC1035 | Domain Names - Implementation and Specification |
| RFC1183 | New DNS RR Definitions |
| RFC1348 | DNS NSAP RRs |
| RFC1706 | DNS NSAP Resource Records |
| RFC1712 | DNS Encoding of Geographical Location |
| RFC1876 | A Means of Expressing Location Information in the Domain Name System |
| RFC1996 | A Mechanism for Prompt Notification of Zone Changes (DNS NOTIFY) |
| RFC2136 | Dynamic Updates for the Domain Name System (DNS UPDATE) |
| RFC2163 | Using the Internet DNS to Distribute MIXER Conformant Global Address Mapping (MCGAM) |
| RFC2230 | Key Exchange Delegation Record for the DNS |
| RFC2535 | Domain Name System Security Extensions |
| RFC2538 | Storing Certificates in the Domain Name System (DNS) |
| RFC2671 | Extension Mechanisms for DNS (EDNS0) |
| RFC2672 | Non-Terminal DNS Name Redirection |
| RFC2782 | A DNS RR for specifying the location of services (DNS SRV) |
| RFC2845 | Secret Key Transaction for DNS (TSIG) |
| RFC2874 | DNS Extensions to Support IPv6 Address Aggregation and Renumbering |
| RFC2930 | Secret Key Establishment for DNS (TKEY RR) |
| RFC3123 | A DNS RR Type for Lists of Address Prefixes (APL RR) |
| RFC3403 | Dynamic Delegation Discovery System (DDDS) Part Three: The Domain Name System (DNS) Database |
| RFC3596 | DNS Extensions to Support IP Version 6 |
Test tool general features
- Fully automated black-box negative testing
- Ready-made test cases
- Written in Java(tm)
- GUI, command line, remote interface modes
- Instrumentation (health-check) capability
- Support and maintenance
- Comprehensive user documentation
- Results reporting and analysis
Tool-specific information
| Tested messages | Notes | Specifications |
|---|---|---|
| QUERY request | RFC1034, 1035 | |
| UPDATE | RFC2136 | |
| NOTIFY | RFC1996 | Supported protocol features | Notes | Specifications |
| UDP transport | RFC1034, 1035 | |
| TCP transport | RFC1034, 1035 | Unsupported protocol features | Notes | Specifications |
| DNSSEC functionality (related RRs are tested, however) | RFC2535 | |
| QUERY response | RFC1034, 1035 | |
| IQUERY | RFC1034, 1035 | |
| STATUS | RFC1034, 1035 |
List of available test suites. Please note that the information in these sheets is subject to periodical change.
Test Tool Datasheet: