KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#typescript #ai-agents #cli #open-source #ai #claude-code #codex #developer-tools #react #windows #deepseek-harness #ai-agent

dnstop

★ 127 Open GitHub ↗

Stay on top of your DNS traffic

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# DNSTOP: STAY ON TOP OF YOUR DNS TRAFFIC

_dnstop_ is a libpcap application (like tcpdump) that displays various
tables of DNS traffic on your network. Currently _dnstop_ displays
tables of:

- Source IP addresses
- Destination IP addresses
- Query types
- Response codes
- Opcodes
- Top level domains
- Second level domains
- Third level domains
- etc...

_dnstop_ supports both IPv4 and IPv6 addresses.

To help find especially undesirable DNS queries, _dnstop_ provides a number of filters. The filters tell _dnstop_ to display only the following types of queries:

- For unknown/invalid TLDs
- A queries where the query name is already an IP address
- PTR queries for RFC1918 address space
- Responses with code REFUSED
- Responses with code SERVFAIL
- Responses with code NXDOMAIN

_dnstop_ can either read packets from the live capture device, or from a tcpdump savefile.

See also http://dns.measurement-factory.com/tools/dnstop/.

For compatibility with [musl libc](https://musl.libc.org/), define `CFLAGS=-D_GNU_SOURCE` during `configure`.

dnstop

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README