dnstop is a libpcap application (a la tcpdump) that displays various tables of DNS traffic on your network. Currently dnstop displays tables of: * Source IP addresses * Destination IP addresses * Query types * Response codes * Opcodes * Top level domains * Second level domains * Third level domains * etc... dnstop supports both IPv4 and IPv6 addresses. To help find especially undesirable DNS queries, dnstop provides a number of filters. The filters tell dnstop to display only the following types of queries: * For unknown/invalid TLDs * A queries where the query name is already an IP address * PTR queries for RFC1918 address space ok landry@
12 lines
437 B
Plaintext
12 lines
437 B
Plaintext
$OpenBSD: patch-dnstop_c,v 1.1.1.1 2008/07/20 09:40:13 sthen Exp $
|
|
--- dnstop.c.orig Sun Jul 20 00:07:10 2008
|
|
+++ dnstop.c Sun Jul 20 00:07:11 2008
|
|
@@ -45,6 +45,7 @@ static const char *Version = "20080502";
|
|
#include <netdb.h>
|
|
|
|
#ifdef HAVE_NET_IF_PPP_H
|
|
+#include <net/ppp_defs.h>
|
|
#include <net/if_ppp.h>
|
|
#define PPP_ADDRESS_VAL 0xff /* The address byte value */
|
|
#define PPP_CONTROL_VAL 0x03 /* The control byte value */
|