Code Monkey home page Code Monkey logo

dnstop's Introduction

DNSTOP: STAY ON TOP OF YOUR DNS TRAFFIC

dnstop is a libpcap application (like tcpdump) that displays various tables of DNS traffic on your network. Currently dnstop displays tables of:

  • Source IP addresses
  • Destination IP addresses
  • Query types
  • Response codes
  • Opcodes
  • Top level domains
  • Second level domains
  • Third level domains
  • etc...

dnstop supports both IPv4 and IPv6 addresses.

To help find especially undesirable DNS queries, dnstop provides a number of filters. The filters tell dnstop to display only the following types of queries:

  • For unknown/invalid TLDs
  • A queries where the query name is already an IP address
  • PTR queries for RFC1918 address space
  • Responses with code REFUSED
  • Responses with code SERVFAIL
  • Responses with code NXDOMAIN

dnstop can either read packets from the live capture device, or from a tcpdump savefile.

See also http://dns.measurement-factory.com/tools/dnstop/.

For compatibility with musl libc, define CFLAGS=-D_GNU_SOURCE during configure.

dnstop's People

Contributors

briandead avatar descent3me avatar fabianfrz avatar raycheung avatar stephanebenfredj avatar wessels avatar

Stargazers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Watchers

avatar avatar avatar avatar avatar avatar avatar avatar avatar

Forkers

tchen0123 butlerwang rijswijk sitedata baddot descent3me stephanebenfredj wzb56 raycheung briandead jahway603 tired-engineer ukulili yarda7

dnstop's Issues

Feature request: CIDR aggregation

It would be spectacularly useful to have CIDR aggregation for v4 and v6 prefixes so that instead of huge lists of individual /32 or /128's, the IP view would show aggregated counts based on the given CIDR prefix length(s).

I would probably pass out with joy if a real-time BGP feed or indirect feed (aka: https://www.team-cymru.com/ip-asn-mapping) could be used as well or in addition with even more sophisticated filtering, but I recognize that I should stop while I'm ahead with just the CIDR aggregation request since this project is pretty dusty in the first place and chances are low that this will be done unless I put some funds towards development.

Feature Request: save result in a file

As far as I read, it is not possible to save the result in a file.
After the program ran for a few days, the display is not enough even with small caracters to see/read all the data.
It could be a very useful option
Thank you

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.