wok-current diff dnstop/description.txt @ rev 25029
lives: back out wget_url update
author | Pascal Bellard <pascal.bellard@slitaz.org> |
---|---|
date | Thu May 19 19:43:34 2022 +0000 (2022-05-19) |
parents | |
children |
line diff
1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/dnstop/description.txt Thu May 19 19:43:34 2022 +0000 1.3 @@ -0,0 +1,26 @@ 1.4 +Dnstop is a libpcap application (like tcpdump) that displays 1.5 +various tables of DNS traffic on your network. 1.6 +Currently dnstop displays tables of: 1.7 + 1.8 +* Source IP addresses 1.9 +* Destination IP addresses 1.10 +* Query types 1.11 +* Response codes 1.12 +* Opcodes 1.13 +* Top level domains 1.14 +* Second level domains 1.15 +* Third level domains 1.16 + 1.17 +Dnstop supports both IPv4 and IPv6 addresses. 1.18 + 1.19 +To help find especially undesirable DNS queries, dnstop provides 1.20 +a number of filters. The filters tell dnstop to display only the 1.21 +following types of queries: 1.22 + 1.23 +* For unknown or invalid TLDs 1.24 +* A queries where the query name is already an IP address 1.25 +* PTR queries for RFC1918 address space 1.26 +* Responses with code REFUSED 1.27 + 1.28 +Dnstop can either read packets from the live capture device, 1.29 +or from a tcpdump savefile.