cap is a network capture utility designed specifically for DNS
traffic. It produces binary data in pcap(3) format, either on
standard output (by default) or in successive dump files (if the d
command line option is given.) This utility is similar to tcpdump(1),
but has finer grained packet recognition tailored to DNS transactions
and protocol options. dnscap is expected to be used for gathering
continuous research or audit traces.
SYNOPSIS
dnscap [-avf6] [-i if ...] [-l vlan ...] [-p port] [-m [quire]] [-h [ir]]
[-q host ...] [-r host ...] [-d base [-k cmd]] [-t lim] [-c lim]
WWW: http://public.oarci.net/tools/dnscap
It uses POE::Component::Client::DNS to handle resolving when configured as
'forward_only' and Net::DNS::Resolver::Recurse wrapped by
POE::Component::Generic to perform recursion.
One may add handlers to massage and manipulate responses to particular queries
which is vaguely modelled after Net::DNS::Nameserver.
WWW: http://search.cpan.org/dist/POE-Component-Server-DNS/
PR: ports/109449
Submitted by: Jin-Shan Tseng <tjs at cdpa.nsysu.edu.tw>
Approved by: erwin (mentor, implicit)
descendant class that allows a virtual DNS to be emulated
instead of querying the real DNS. A set of static DNS
records may be supplied, or arbitrary code may be specified
as a means for retrieving DNS records, or even generating
them on the fly.
WWW: http://search.cpan.org/dist/Net-DNS-Resolver-Programmable/
- Koen Martens
gmc@sonologic.nl
PR: ports/108997
Submitted by: Koen Martens <gmc at sonologic.nl>
single one-ip-address domain. It can handle SOA, NS, MX, A, and PTR
requests. The 1.1.0 version includes a nice X windows GUI for management.
WWW: http://www.fourcalorieservers.com/
PR: ports/107624
Submitted by: Ron Scheckelhoff <rscheckelhoff at fourcalorieservers.com>
for small gateway machines, like a Soekris box. Its main feature
is that it does not require any Perl or Python interpreter.
It supports HTTPS, can send a mail report, and can run as daemon.
It is also very easy to deploy.
WWW: http://www.bsdmon.com/wakka/OpenDD
PR: ports/105434
Submitted by: Alexander Logvinov <ports at logvinov.com>
Ldns is a library to simplify implementaition of recent DNS
RFCs. The goal is to allow depelopers to easily create
software conforming to current RFCs and experimental software
for current Internet drafts. Because ldns is written in C
it should be a lot faster than Perl or other scripting
languages.
WWW: http://www.nlnetlabs.nl/ldns/
PR: ports/91042
Submitted by: Konstantin Saurbier <saurbier@math.uni-bielefeld.de> <saurbier@math.uni-bielefeld.de>
dnscheck is a simple to use DNS zone sanity checker, comparing name server
records and serial numbers with both the parent zone and the zone itself.
It allows you to find lame, leaked or stale name servers which have the
potential to cause disruption.
PR: 86542
Submitted by: arrod Sayers <jarrod@netleader.com.au>
Approved by: pav (mentor)
This is queryperf, a DNS server query performance testing tool.
It is primarily intended for measuring the performance of
authoritative DNS servers, but it has also been used for measuring
caching server performance.
See /usr/local/share/docs/queryperf//queryperf.txt for more
information on the command line option and the required
configuration files. ND-of-queryperf/pkg-descr
PR: ports/85179
Submitted by: Edwin Groothuis <edwin@mavetju.org>
tinystats is a statistic generator for DJB's tinydns.
It can be easily integrated with rrdtool to generate
nice graphical DNS stats.
WWW: http://www.morettoni.net/tinystats.html
PR: ports/83167
Submitted by: Filippo Natali <filippo.natali@gmail.com>
It checks and reports whether a domain name, hosted by your organization,
is still in use, and if so, reports whether your name servers are
still the delegated name servers of the domain name in question.
PR: ports/80834
Submitted by: Ozkan KIRIK <ozkan@enderunix.org>
When you update a zone in your djbdns DNS you must notify the slaves
about your change.
PR: ports/80091
Submitted by: Emanuel Haupt <ehaupt@critical.ch>
It scans the range and classifies its findings into 4 categories:
- Missing A records
- Missing PTR records
- Mismatched A/PTR records
- Stale PTR records
PR: ports/80119
Submitted by: Mark Foster <mark@foster.cc>
Approved by: adamw (mentor)
allows for per record configuration. It also includes a wizard for generation
of configuration files.
PR: ports/76614
Submitted by: Dan Smith <dan@algenta.com>
Drill is a tool ala dig from BIND. It was designed with
DNSSEC in mind and should be a useful debugging/query tool
for DNSSEC.
PR: ports/75882
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl>
Sqldjbdns is an authoritative DNS server that pulls its
data directly from a set of SQL tables. It supports fully
dynamic A, MX, TXT, and PTR records, and run-time configurable
static NS and SOA records. It also supports schedule expiry
and introduction of records.
This package also includes dnscache with PostgreSQL backend
PR: ports/71345
Submitted by: Radim Kolar <hsn@netmag.cz>
dns/walker is the same ports. And name 'walker' was
recognized as a better name. So we move dns/dnssecwalker
to dns/walker port and remove the first one.
Submitted by: Johan van Selst <johans(at)stack.nl>
types (including the DNSSEC types), and unknown types. It can be used for
queries, zone transfers, and dynamic updates. It includes a cache which can be
used by clients, and a minimal implementation of a server. It supports TSIG
authenticated messages, partial DNSSEC verification, and EDNS0.
dnsjava provides functionality above and beyond that of the InetAddress class.
Since it is written in pure Java, dnsjava is fully threadable, and in many
cases is faster than using InetAddress.
dnsjava provides both high and low level access to DNS. The high level
functions perform queries for records of a given name, type, and class, and
return an array of records. There is also a clone of InetAddress, which is even
simpler. A cache is used to reduce the number of DNS queries sent. The low
level functions allow direct manipulation of DNS messages and records, as well
as allowing additional resolver properties to be set.
WWW: http://www.xbill.org/dnsjava/
dnshijacker is a libnet/libpcap based packet sniffer & spoofer. a
versatile tool, dnshijacker supports tcpdump style filters that allow
you to specifically target victims. dns answers are forged based on
entries in a "fabrication table" or by simply forging one answer to all
requests. a print only mode is also supported, allowing one to simply
monitor dns traffic. dns hijacker is an excellent tool for network level
ad blocking / removal.
WWW: http://pedram.redhive.com/projects.php
PR: ports/72898
Submitted by: David Thiel <lx@redundancy.redundancy.org>
DNSdoctor is intended to help solving misconfigurations or inconsistencies
of DNS zone files.
Features
* Powerful configuration file
* Does not depend on policies
* Fine grained test selection (by test, by categories, by zones)
* Full IPv6 support (connectivity and AAAA records)
* Supports several input/output interfaces such as CLI, GUI, CGI
* Dedicated mode for use inside shell scripts
* Batch mode available (ideal when dealing with several domains)
* Multi-threaded application in order to cut down checking time
* Extensible: new tests, new interfaces, new reports, ...
* Exception and cache mechanisms to simplify test writting
WWW: http://www.dnsdoctor.org/
PR: ports/71819
Submitted by: Janos Mohacsi <janos.mohacsi@niif.hu>
rbllookup is a small perl script which allow you to check given IP/host
name.
In this version you have statically inserted RBL servers, but code is based
on GPL source, so you can easy add more/replace/delete RBL servers by
editing rbllookup.pl file.
Also, author looking for support from programmers for ideas, codefix, new
features, switch to c/c++, gui version?
Author: Marcin Gondek <drixter@e-utp.net>
WWW: http://rbllookup.sourceforge.net
PR: ports/69160
Submitted by: Marcin Gondek <drixter@e-utp.net>
administrators to quickly and easily make the most common DNS queries
without constructing lengthy dig commands.
PR: 73030
Submitted by: Jean-Yves Lefort <jylefort@brutele.be>
