Monitor BIND DNS Network Traffic with dnstop

Archived discussion · New replies are closed.

dnstop is a tool for monitoring DNS network traffic. Download it at:

http://pkgs.repoforge.org/dnstop/

After installation, run:

dnstop {interface-name}

to monitor DNS traffic. For example, to monitor eth0:

dnstop eth0

Example command output

Queries: 55 new, 1224 total  Thu Jul 12 21:36:20 2012

Sources             Count      %
--------------- --------- ------
216.179.252.71       1217   99.4
110.164.252.214         2    0.2
203.113.5.243           1    0.1
203.113.7.245           1    0.1
67.215.80.19            1    0.1
203.158.4.45            1    0.1
202.80.233.23           1    0.1

Option help

s - Sources list d - Destinations list t - Query types o - Opcodes r - Rcodes 1 - 1st level Query Names ! - with Sources 2 - 2nd level Query Names @ - with Sources 3 - 3rd level Query Names # - with Sources 4 - 4th level Query Names $ - with Sources 5 - 5th level Query Names % - with Sources 6 - 6th level Query Names ^ - with Sources 7 - 7th level Query Names & - with Sources 8 - 8th level Query Names * - with Sources 9 - 9th level Query Names ( - with Sources ^R - Reset counters ^X - Exit ? - this

EOF.← Back to articles