[dns-operations] "drool" DNS Replay tool, Beta availability announcement

John Kristoff jtk at depaul.edu
Fri Mar 31 21:29:10 UTC 2017


On Fri, 24 Mar 2017 19:18:48 +0000
Keith Mitchell <keith at dns-oarc.net> wrote:

> drool can replay DNS traffic from packet capture (PCAP) files and send
> it to a specified server, with the option to manipulate the timing
> between packets, as well as loop packets infinitely or for a set number
> of iterations. This tool is planned to produce a minimum of 200,000 UDP
> packets per second and 10,000 TCP sessions per second on common hardware.

This looks very useful and I have a use for this in the next few
weeks.  This may be a two-edged sword, since this quickly becomes a
tool for good or bad, but if perhaps via back channels, having a repo
of some sample attack data too, that would be very helpful.

John



More information about the dns-operations mailing list