[dns-operations] simple measurement

Randy Bush randy at psg.com
Wed Dec 22 07:54:42 UTC 2010


> Use dnscap to capture 24hrs worth of DNS packets, then feed it to
> dnstop for reporting.  Its almost as simple as
> 
> 
>   dnscap -i fxp0 -w /tmp/dnscap -t 86400 -k 'dnstop -Q -R | Mail $USER'
> 
> Except that you'd need to write a shell script to replace the embedded
> dnstop command|pipe because dnscap appends the filename to the end of the -k
> command.  Plus you'd want to remove or do something with the pcap files
> so they don't accumulate.

happily, there were freebsd ports.  running now.  i will whine about the
report(s) when i get them, of course. :)

thanks!

randy



More information about the dns-operations mailing list