From b728ed3e29907fc9d3b306b6410de9c870481c81 Mon Sep 17 00:00:00 2001
From: aaronkaplan <aaron@lo-res.org>
Date: Mon, 3 May 2021 00:57:14 +0200
Subject: [PATCH] Re-Do the definition.json, according to the results of the
 discussion in https://github.com/MISP/misp-objects/pull/314

Removing *_ip and *_domain
Keeping bailiwick a domain type
---
 objects/passive-dns/definition.json | 36 -----------------------------
 1 file changed, 36 deletions(-)

diff --git a/objects/passive-dns/definition.json b/objects/passive-dns/definition.json
index 52fa46a..f2cf7d8 100644
--- a/objects/passive-dns/definition.json
+++ b/objects/passive-dns/definition.json
@@ -28,24 +28,6 @@
       "misp-attribute": "text",
       "ui-priority": 1
     },
-    "rdata_ip": {
-      "categories": [
-        "Network activity",
-        "External analysis"
-      ],
-      "description": "Resource records of the queried resource. Mapped to MISP 'ip' address type. Valid for rrtypes (A, AAAA, A6, ...).",
-      "misp-attribute": "ip-src",
-      "ui-priority": 1
-    },
-    "rdata_domain": {
-      "categories": [
-        "Network activity",
-        "External analysis"
-      ],
-      "description": "Resource records of the queried resource. Mapped to MISP 'domain' address type. Valid for rrtypes (CNAME, etc.).",
-      "misp-attribute": "domain",
-      "ui-priority": 1
-    },
     "rrname": {
       "categories": [
         "Network activity",
@@ -55,24 +37,6 @@
       "misp-attribute": "text",
       "ui-priority": 1
     },
-    "rrname_domain": {
-      "categories": [
-        "Network activity",
-        "External analysis"
-      ],
-      "description": "Resource Record name of the queried resource. Same as the field 'rrname', however already mapped to the MISP 'domain' type so that we can correlate.",
-      "misp-attribute": "domain",
-      "ui-priority": 1
-    },
-    "rrname_ip": {
-      "categories": [
-        "Network activity",
-        "External analysis"
-      ],
-      "description": "Resource Record name of the queried resource. Same as the field 'rrname', however already mapped to the MISP 'ip' type so that we can correlate. Note that this is only valid if 'rrtype' is 'PTR'.",
-      "misp-attribute": "ip-src",
-      "ui-priority": 1
-    },
     "rrtype": {
       "categories": [
         "Network activity",