[dns-operations] dnstop 'refused' filter

Duane Wessels wessels at dns-oarc.net
Wed Jan 28 22:38:01 UTC 2009


For any dnstop users, there is a new version that will filter on
REFUSED responses.  If you start it like this:

     $ dnstop -R -f refused eth0

and then select 'd' for the Destinations view, you'll see a list of
IPs that your nameserver sends REFUSED responses to.

For example:

Replies: 0 new, 2763 total

Destinations        Count      %
--------------- --------- ------
64.57.246.123        1180   42.7
70.86.80.98           686   24.8
65.116.4.130          138    5.0
66.249.70.213          14    0.5
88.218.70.64           13    0.5
74.125.64.73           12    0.4


tarball at http://dns.measurement-factory.com/tools/dnstop/src/dnstop-20090128.tar.gz



More information about the dns-operations mailing list