slackbuilds_ponce/network/dnstop
Robby Workman 143991a46e Entire Repo: Remove APPROVED field from .info files
This field used to make sense in our pre-git days, but
the Signed-Off-By: line serves the same purpose (and
even more) now, so APPROVED has been rejected.  ;-)

Signed-off-by: Robby Workman <rworkman@slackbuilds.org>
2012-08-14 23:22:50 -05:00
..
dnstop.info Entire Repo: Remove APPROVED field from .info files 2012-08-14 23:22:50 -05:00
dnstop.SlackBuild
README
slack-desc

dnstop is a libpcap  application (ala tcpdump) that displays various tables
of DNS traffic on your network. Currently dnstop displays tables of:

    * Source IP addresses
    * Destination IP addresses
    * Query types
    * Response codes
    * Opcodes
    * Top level domains
    * Second level domains
    * Third level domains
    * etc...

dnstop supports both IPv4 and IPv6 addresses.

To help find especially undesirable DNS queries, dnstop provides a number of
filters. The filters tell dnstop to display only the following types of queries:

    * For unknown/invalid TLDs
    * A queries where the query name is already an IP address
    * PTR queries for RFC1918 address space

dnstop can either read packets from the live capture device, or from a tcpdump
savefile.

--
Unless modified, this script compiles with PPP frame support.