Commit Graph

11 Commits

Author SHA1 Message Date
espie
eae66e4a7b PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00
giovanni
f2f317a572 Update to version 20121017
ok sthen@ (Maintainer)
2012-11-29 14:08:51 +00:00
gonzalo
91f7ae8a4d Update for dnstop to 20120611:
* Added "qtype-any" filter for displaying ANY queries which are
  now fashionable in DNS based attacks.

* Anand Buddhev pointed out that LDFLAGS= is missing from Makefile.in.
  Also updated known_tlds.h.

While here dest and GROFF is not needed.

Ok sthen@ (maintainer)
2012-10-05 19:04:45 +00:00
sthen
32b51de3f5 update to dnstop-20110502, from "Gonzalo L. R." 2012-03-11 14:07:00 +00:00
sthen
9fe1f16958 update to 20110127; from Gleydson Soares, small tweak + regen patches from me 2011-03-03 01:03:37 +00:00
sthen
7270b75cb9 update to 20110113b, new release pointed out by Brian Keefer who has
also worked with upstream to get some of the problems addressed by
patches fixed in the distribution instead, thanks!
2011-01-14 08:23:21 +00:00
espie
0397d65db0 new depends 2010-11-19 22:31:32 +00:00
espie
47ff75aa46 USE_GROFF=Yes 2010-10-18 18:36:45 +00:00
sthen
afef0a0409 Remove a pcap_setnonblock() call which was added as a workaround for a
problem in OSX, it breaks reading from capture files. From Brian Keefer.
2010-10-14 07:29:44 +00:00
sthen
a829765073 update dnstop to 20090128 (which wants ns_r_refused from BIND 9's
resolver; patched here to use REFUSED).

from Stephan Rickauer, thanks!
2009-08-26 08:36:03 +00:00
sthen
52f143539c import dnstop:
dnstop is a libpcap application (a la tcpdump) that displays
various tables of DNS traffic on your network. Currently dnstop
displays tables of:

    * Source IP addresses
    * Destination IP addresses
    * Query types
    * Response codes
    * Opcodes
    * Top level domains
    * Second level domains
    * Third level domains
    * etc...

dnstop supports both IPv4 and IPv6 addresses.

To help find especially undesirable DNS queries, dnstop provides a
number of filters. The filters tell dnstop to display only the following
types of queries:

    * For unknown/invalid TLDs
    * A queries where the query name is already an IP address
    * PTR queries for RFC1918 address space

ok landry@
2008-07-20 09:40:13 +00:00