Age | Commit message (Collapse) | Author | Files | Lines |
|
2005/01/21 Sam Norris
Added support for third-level domain statistics. Use the -t
command line option to enable collection of 3rd-level stats,
and use '3' while running to display them. Note that enabling
3rd-level stats collection does not automatically also enable
2nd-level stats.
2005/01/13 Duane Wessels
Added a non-interactive mode. If you specify a savefile and
stdout is not a TTY, dnstop prints each table at the end.
2004/03/09 Duane Wessels
Added filter support. Filters can be used to restrict the input
stream to queries with certain characteristics. The currently
defined filters are:
unknown-tlds Only includes queries for TLDs that are
bogus. Useful for identifying hosts/servers
that leak queries for things like "localhost"
or "workgroup."
A-for-A Only includes A queries for names that are
already IP addresses. Certain Microsoft
Windows DNS servers have a known bug that
forward these queries.
rfc1918-ptr PTR queries for addresses in RFC1918 space.
These should never leak from inside an
organization.
2003/11/13 Mark Foster <mark@foster.cc>
Added 'c' to display options. This screen will combine the
source and sld fields to show "who is querying for what" -
reason: we see alot of duplicate querys for whatever reason.
This will help separate the legitimate queries from the broken
resolvers, etc. See http://www.circleid.com/article/102_0_1_0_C/
for more about that.
Closes PR 29807.
|
|
|
|
changed again (see previous commit) and to avoid breakage for people
who have the old distfile.
|
|
|
|
|
|
|
|
.\" $Id: dnstop.8,v 1.5 2003/11/13 21:12:57 wessels Exp $
|
|
|
|
Should anybody feel like they could be the maintainer for any of thewe packages,
please adjust.
|
|
1c1
< .\" $Id: dnstop.8,v 1.2 2002/12/24 19:20:28 wessels Exp $
---
> .\" $Id: dnstop.8,v 1.3 2003/01/24 17:44:23 wessels Exp $
53c53
< display the desitination address table
---
> display the destination address table
Noted by Jeremy C. Reed in PR 21286.
|
|
|
|
manual page.
|
|
|
|
tables of DNS traffic on your network. Currently dnstop displays
tables of:
* Source IP addresses
* Destination IP addresses
* Query types
* Top level domains
* Second level domains
http://dnstop.measurement-factory.com/
|