Commit Graph

2 Commits

Author SHA1 Message Date
sthen
a829765073 update dnstop to 20090128 (which wants ns_r_refused from BIND 9's
resolver; patched here to use REFUSED).

from Stephan Rickauer, thanks!
2009-08-26 08:36:03 +00:00
sthen
52f143539c import dnstop:
dnstop is a libpcap application (a la tcpdump) that displays
various tables of DNS traffic on your network. Currently dnstop
displays tables of:

    * Source IP addresses
    * Destination IP addresses
    * Query types
    * Response codes
    * Opcodes
    * Top level domains
    * Second level domains
    * Third level domains
    * etc...

dnstop supports both IPv4 and IPv6 addresses.

To help find especially undesirable DNS queries, dnstop provides a
number of filters. The filters tell dnstop to display only the following
types of queries:

    * For unknown/invalid TLDs
    * A queries where the query name is already an IP address
    * PTR queries for RFC1918 address space

ok landry@
2008-07-20 09:40:13 +00:00