{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,28]],"date-time":"2025-08-28T00:05:48Z","timestamp":1756339548196,"version":"3.44.0"},"publisher-location":"New York, NY, USA","reference-count":53,"publisher":"ACM","funder":[{"name":"National Natural Science Fund for the Excellent Young Scientists Fund Program (Overseas)"},{"name":"National Natural Science Foundation of China (NSFC)","award":["62171046"],"award-info":[{"award-number":["62171046"]}]},{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2023YFB2904204"],"award-info":[{"award-number":["2023YFB2904204"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,9,8]]},"DOI":"10.1145\/3718958.3750476","type":"proceedings-article","created":{"date-parts":[[2025,8,27]],"date-time":"2025-08-27T16:54:11Z","timestamp":1756313651000},"page":"467-480","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["DNSLogzip: A Novel Approach to Fast and High-Ratio Compression for DNS Logs"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-2726-2218","authenticated-orcid":false,"given":"Yunwei","family":"Dai","sequence":"first","affiliation":[{"name":"School of Cyber Science and Engineering, Southeast University, Nanjing, China"},{"name":"Jiangsu Future Networks Innovation Institute, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-4933-0276","authenticated-orcid":false,"given":"Guyue","family":"Liu","sequence":"additional","affiliation":[{"name":"Peking University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3545-1122","authenticated-orcid":false,"given":"Tao","family":"Huang","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Southeast University, Nanjing, China"},{"name":"State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing, China"},{"name":"Purple Mountain Laboratories, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6350-6362","authenticated-orcid":false,"given":"Shuo","family":"Wang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing, China"},{"name":"Purple Mountain Laboratories, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-6147-6956","authenticated-orcid":false,"given":"Yong","family":"Wang","sequence":"additional","affiliation":[{"name":"Jiangsu Zhiwang Technology Co., Ltd., Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-1455-9061","authenticated-orcid":false,"given":"Xingli","family":"Wu","sequence":"additional","affiliation":[{"name":"Jiangsu Zhiwang Technology Co., Ltd., Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-0814-4722","authenticated-orcid":false,"given":"Lei","family":"Song","sequence":"additional","affiliation":[{"name":"China Mobile Communications Group Shandong Co., Ltd., Jinan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-8480-2569","authenticated-orcid":false,"given":"Heshun","family":"Li","sequence":"additional","affiliation":[{"name":"China Mobile Communications Group Shandong Co., Ltd., Jinan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-4434-0073","authenticated-orcid":false,"given":"Chuang","family":"Wang","sequence":"additional","affiliation":[{"name":"China Mobile Communications Group Shandong Co., Ltd., Jinan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-8877-1631","authenticated-orcid":false,"given":"Fanglong","family":"Hu","sequence":"additional","affiliation":[{"name":"China Telecom Co., Ltd., Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-7055-1425","authenticated-orcid":false,"given":"Hong","family":"Sun","sequence":"additional","affiliation":[{"name":"China United Network Communications Corporation Jiangsu Branch, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-2149-1809","authenticated-orcid":false,"given":"Yanan","family":"Li","sequence":"additional","affiliation":[{"name":"China United Network Communications Corporation Jiangsu Branch, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,8,27]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1016\/B978-193226682-5\/50007-6"},{"key":"e_1_3_2_1_2_1","unstructured":"2009. 7za. http:\/\/p7zip.sourceforge.net\/"},{"key":"e_1_3_2_1_3_1","unstructured":"2019. bzip2. https:\/\/sourceware.org\/bzip2\/"},{"key":"e_1_3_2_1_4_1","unstructured":"2020. gzip. https:\/\/www.gzip.org\/"},{"key":"e_1_3_2_1_5_1","unstructured":"2024. Data Plane Development Kit (DPDK). https:\/\/www.dpdk.org\/"},{"key":"e_1_3_2_1_6_1","unstructured":"2024. Test Access Port (TAP). https:\/\/www.centec.com\/solution\/TAP-Series-Ethernet-Switch\/V680-TAP"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","unstructured":"Donald E. Eastlake 3rd. 2006. Domain Name System (DNS) Case Insensitivity Clarification. RFC 4343. 10.17487\/RFC4343","DOI":"10.17487\/RFC4343"},{"key":"e_1_3_2_1_8_1","unstructured":"Akamai Technologies Inc. 2024. DNS activity. https:\/\/techdocs.akamai.com\/etp\/docs\/dns-activity\/"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3517745.3561425"},{"key":"e_1_3_2_1_10_1","unstructured":"Alibaba Cloud. 2023. Intranet DNS logs. https:\/\/www.alibabacloud.com\/help\/en\/privatezone\/latest\/dnslog\/"},{"key":"e_1_3_2_1_11_1","unstructured":"Amazon Web Services Inc. 2024. Values that appear in Resolver query logs. https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/resolver-query-logs-format.html"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/5684.5688"},{"key":"e_1_3_2_1_13_1","unstructured":"Michael Burrows. 1994. A block-sorting lossless data compression algorithm. SRS Research Report 124 (1994)."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2950325"},{"key":"e_1_3_2_1_15_1","unstructured":"Chandan Chowdhury. 2019. Finding malicious usage via Capture Storage Analysis and Visualization of DNS packets. Ph. D. Dissertation."},{"key":"e_1_3_2_1_16_1","unstructured":"Robert Christensen. 2013. The source codes of LogArchive. https:\/\/github.com\/robertchristensen\/log_archive_v0"},{"key":"e_1_3_2_1_17_1","volume-title":"SIGMOD Conference. 1283\u20131284","author":"Christensen Robert","year":"2013","unstructured":"Robert Christensen and Feifei Li. 2013. Adaptive log compression for massive log data. In SIGMOD Conference. 1283\u20131284."},{"key":"e_1_3_2_1_18_1","unstructured":"Spark Contributors. 2024. Spark. https:\/\/github.com\/apache\/spark\/blob\/v3.5.4\/core\/src\/main\/scala\/org\/apache\/spark\/storage\/BlockManager.scala"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.103718"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.17487\/rfc1951"},{"key":"e_1_3_2_1_21_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Ding Hailun","year":"2021","unstructured":"Hailun Ding, Shenao Yan, Juan Zhai, and Shiqing Ma. 2021. ELISE: A Storage Efficient Logging System Powered by Redundancy Reduction and Representation Learning. In 30th USENIX Security Symposium (USENIX Security 21). USENIX Association, 3023\u20133040."},{"key":"e_1_3_2_1_22_1","volume-title":"MLC: an efficient multi-level log compression method for cloud backup systems. In 2016 IEEE Trustcom\/BigDataSE\/ISPA","author":"Feng Bo","unstructured":"Bo Feng, Chentao Wu, and Jie Li. 2016. MLC: an efficient multi-level log compression method for cloud backup systems. In 2016 IEEE Trustcom\/BigDataSE\/ISPA. IEEE, 1358\u20131365."},{"key":"e_1_3_2_1_23_1","unstructured":"Brian Fox. 2024. Bash Reference Manual. https:\/\/www.gnu.org\/software\/bash\/manual\/html_node\/Pipelines.html"},{"key":"e_1_3_2_1_24_1","volume-title":"Extraction and prediction of user communication behaviors from dns query logs based on nonnegative tensor factorization","author":"Hatanaka Kotaro","year":"2023","unstructured":"Kotaro Hatanaka, Tatsuaki Kimura, Yuka Komai, Keisuke Ishibashi, Masahiro Kobayashi, and Shigeaki Harada. 2023. Extraction and prediction of user communication behaviors from dns query logs based on nonnegative tensor factorization. IEEE Transactions on Network and Service Management (2023)."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/JRPROC.1952.273898"},{"key":"e_1_3_2_1_26_1","unstructured":"Internet Systems Consortium Inc. 2024. BIND 9 Configuration Reference. https:\/\/bind9.readthedocs.io\/en\/latest\/reference.html"},{"key":"e_1_3_2_1_27_1","volume-title":"The distribution of the flora in the alpine zone. 1. New phytologist 11, 2","author":"Jaccard Paul","year":"1912","unstructured":"Paul Jaccard. 1912. The distribution of the flora in the alpine zone. 1. New phytologist 11, 2 (1912), 37\u201350."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2014.09.099"},{"key":"e_1_3_2_1_29_1","unstructured":"Xiaoyun Li. 2023. The source codes of LogShrink. https:\/\/github.com\/IntelligentDDS\/LogShrink"},{"key":"e_1_3_2_1_30_1","volume-title":"Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering. 1\u201312","author":"Li Xiaoyun","year":"2024","unstructured":"Xiaoyun Li, Hongyu Zhang, Van-Hoang Le, and Pengfei Chen. 2024. Logshrink: Effective log compression by leveraging commonality and variability of log data. In Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering. 1\u201312."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2019.00085"},{"key":"e_1_3_2_1_32_1","volume-title":"UltraDNS Annual Domain Name System (DNS) Traffic and Analysis","author":"Vercara LLC.","year":"2023","unstructured":"Vercara LLC. 2024. UltraDNS Annual Domain Name System (DNS) Traffic and Analysis 2023. https:\/\/vercara.com\/wp-content\/uploads\/2024\/05\/2023-DNS-Analysis-Report.pdf."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2666652.2666659"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","unstructured":"Philip Matthews Iljitsch van Beijnum and Marcelo Bagnulo. 2011. Stateful NAT64: Network Address and Protocol Translation from IPv6 Clients to IPv4 Servers. RFC 6146. 10.17487\/RFC6146","DOI":"10.17487\/RFC6146"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","unstructured":"P. Mockapetris. 1987. Domain names - concepts and facilities. RFC 1034. 10.17487\/RFC1034","DOI":"10.17487\/RFC1034"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","unstructured":"P. Mockapetris. 1987. Domain names - implementation and specification. RFC 1035. 10.17487\/RFC1035","DOI":"10.17487\/RFC1035"},{"key":"e_1_3_2_1_37_1","volume-title":"Are Large DNS Messages Falling to Bits?","author":"Moura Giovane C. M.","unstructured":"Giovane C. M. Moura, Moritz M\u00fcller, Marco Davids, Maarten Wullink, and Cristian Hesselman. 2021. Fragmentation, Truncation, and Timeouts: Are Large DNS Messages Falling to Bits?. In Passive and Active Measurement, Oliver Hohlfeld, Andra Lutu, and Dave Levin (Eds.). Springer International Publishing, Cham, 460\u2013477."},{"key":"e_1_3_2_1_38_1","unstructured":"NLnet Labs. 2024. Unbound Configuration Manual. https:\/\/unbound.docs.nlnetlabs.nl\/en\/latest\/manpages\/unbound.conf.html"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"crossref","first-page":"695","DOI":"10.1016\/S1389-1286(03)00293-7","article-title":"An overview of DNS-based server selections in content distribution networks","volume":"43","author":"Pan Jianping","year":"2003","unstructured":"Jianping Pan, Y Thomas Hou, and Bo Li. 2003. An overview of DNS-based server selections in content distribution networks. Computer Networks 43, 6 (2003), 695\u2013711.","journal-title":"Computer Networks"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2021.3105599"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","unstructured":"Ronald L. Rivest. 1992. The MD5 Message-Digest Algorithm. RFC 1321. 10.17487\/RFC1321","DOI":"10.17487\/RFC1321"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","unstructured":"Manmeet Singh Maninder Singh and Sanmeet Kaur. 2019. \"10 Days DNS Network Traffic from April-May 2016\". Mendeley Data V2. 10.17632\/zh3wnddzxy.2","DOI":"10.17632\/zh3wnddzxy.2"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"crossref","first-page":"102875","DOI":"10.1016\/j.cose.2022.102875","article-title":"APT beaconing detection: A systematic review","volume":"122","author":"Talib Manar Abu","year":"2022","unstructured":"Manar Abu Talib, Qassim Nasir, Ali Bou Nassif, Takua Mokhamed, Nafisa Ahmed, and Bayan Mahfood. 2022. APT beaconing detection: A systematic review. Computers & Security 122 (2022), 102875.","journal-title":"Computers & Security"},{"key":"e_1_3_2_1_44_1","unstructured":"Rocky Linux Team. 2023. Rocky Linux home page. https:\/\/rockylinux.org\/"},{"key":"e_1_3_2_1_45_1","unstructured":"The Apache Software Foundation. 2025. Log Files. https:\/\/httpd.apache.org\/docs\/2.4\/logs.html"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2016.2558918"},{"key":"e_1_3_2_1_47_1","unstructured":"Junyu Wei. 2021. The source codes of LogReducer. https:\/\/github.com\/THUBear-wjy\/LogReducer"},{"key":"e_1_3_2_1_48_1","volume-title":"19th USENIX Conference on File and Storage Technologies (FAST 21)","author":"Wei Junyu","year":"2021","unstructured":"Junyu Wei, Guangyan Zhang, Yang Wang, Zhiwei Liu, Zhanyang Zhu, Junchao Chen, Tingtao Sun, and Qi Zhou. 2021. On the feasibility of parser-based log compression in {Large-Scale} cloud systems. In 19th USENIX Conference on File and Storage Technologies (FAST 21). 249\u2013262."},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101933"},{"key":"e_1_3_2_1_50_1","unstructured":"Siyu Yu. 2025. The source codes of Denum. https:\/\/github.com\/gaiusyu\/Denum"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3691620.3695474"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3191329"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1977.1055714"}],"event":{"name":"SIGCOMM '25: ACM SIGCOMM 2025 Conference","location":"S\u00e3o Francisco Convent Coimbra Portugal","acronym":"SIGCOMM '25","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication"]},"container-title":["Proceedings of the ACM SIGCOMM 2025 Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3718958.3750476","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,27]],"date-time":"2025-08-27T16:57:56Z","timestamp":1756313876000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3718958.3750476"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,8,27]]},"references-count":53,"alternative-id":["10.1145\/3718958.3750476","10.1145\/3718958"],"URL":"https:\/\/doi.org\/10.1145\/3718958.3750476","relation":{},"subject":[],"published":{"date-parts":[[2025,8,27]]},"assertion":[{"value":"2025-08-27","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}