cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
95,429 Commits 1 Branch 0 Tags 544 MiB
68269c76a1
Commit Graph

12 Commits

Author SHA1 Message Date
sthen
fb6d0c6874 update to dnstop 20140915, which adds a "new-gtlds" filter, which shows 
only queries for doains ending with recently added generic TLDs which can
be useful for tracking down hosts using internal names (maybe by relying
on automatic qualification of names i.e. xy.prod -> xy.prod.example.com)
that will conflict with new GTLDs.

As the release notes put it, 'If you use short (not fully qualified) names
internally you may be uknownlying[sic] relying on root (or other) name
servers to return NXDOMAIN for them. If so, "you're gonna have a bad time."'
 2014-09-16 10:32:39 +00:00
espie
eae66e4a7b PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00
giovanni
f2f317a572 Update to version 20121017 
ok sthen@ (Maintainer)
 2012-11-29 14:08:51 +00:00
gonzalo
91f7ae8a4d Update for dnstop to 20120611: 
* Added "qtype-any" filter for displaying ANY queries which are
  now fashionable in DNS based attacks.

* Anand Buddhev pointed out that LDFLAGS= is missing from Makefile.in.
  Also updated known_tlds.h.

While here dest and GROFF is not needed.

Ok sthen@ (maintainer)
 2012-10-05 19:04:45 +00:00
sthen
32b51de3f5 update to dnstop-20110502, from "Gonzalo L. R." 2012-03-11 14:07:00 +00:00
sthen
9fe1f16958 update to 20110127; from Gleydson Soares, small tweak + regen patches from me 2011-03-03 01:03:37 +00:00
sthen
7270b75cb9 update to 20110113b, new release pointed out by Brian Keefer who has 
also worked with upstream to get some of the problems addressed by
patches fixed in the distribution instead, thanks!
 2011-01-14 08:23:21 +00:00
espie
0397d65db0 new depends 2010-11-19 22:31:32 +00:00
espie
47ff75aa46 USE_GROFF=Yes 2010-10-18 18:36:45 +00:00
sthen
afef0a0409 Remove a pcap_setnonblock() call which was added as a workaround for a 
problem in OSX, it breaks reading from capture files. From Brian Keefer.
 2010-10-14 07:29:44 +00:00
sthen
a829765073 update dnstop to 20090128 (which wants ns_r_refused from BIND 9's 
resolver; patched here to use REFUSED).

from Stephan Rickauer, thanks!
 2009-08-26 08:36:03 +00:00
sthen
52f143539c import dnstop: 
dnstop is a libpcap application (a la tcpdump) that displays
various tables of DNS traffic on your network. Currently dnstop
displays tables of:

    * Source IP addresses
    * Destination IP addresses
    * Query types
    * Response codes
    * Opcodes
    * Top level domains
    * Second level domains
    * Third level domains
    * etc...

dnstop supports both IPv4 and IPv6 addresses.

To help find especially undesirable DNS queries, dnstop provides a
number of filters. The filters tell dnstop to display only the following
types of queries:

    * For unknown/invalid TLDs
    * A queries where the query name is already an IP address
    * PTR queries for RFC1918 address space

ok landry@
 2008-07-20 09:40:13 +00:00