wok-current diff dnstop/description.txt @ rev 24944
updated n2n (2.4 -> 3.0)
author | Hans-G?nter Theisgen |
---|---|
date | Fri Apr 22 16:44:33 2022 +0100 (2022-04-22) |
parents | |
children |
line diff
1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/dnstop/description.txt Fri Apr 22 16:44:33 2022 +0100 1.3 @@ -0,0 +1,26 @@ 1.4 +Dnstop is a libpcap application (like tcpdump) that displays 1.5 +various tables of DNS traffic on your network. 1.6 +Currently dnstop displays tables of: 1.7 + 1.8 +* Source IP addresses 1.9 +* Destination IP addresses 1.10 +* Query types 1.11 +* Response codes 1.12 +* Opcodes 1.13 +* Top level domains 1.14 +* Second level domains 1.15 +* Third level domains 1.16 + 1.17 +Dnstop supports both IPv4 and IPv6 addresses. 1.18 + 1.19 +To help find especially undesirable DNS queries, dnstop provides 1.20 +a number of filters. The filters tell dnstop to display only the 1.21 +following types of queries: 1.22 + 1.23 +* For unknown or invalid TLDs 1.24 +* A queries where the query name is already an IP address 1.25 +* PTR queries for RFC1918 address space 1.26 +* Responses with code REFUSED 1.27 + 1.28 +Dnstop can either read packets from the live capture device, 1.29 +or from a tcpdump savefile.