[nsd-users] Logfile/verbosity and master/slave

[Lew Payne]

For the time being, I've settled on this to fill my needs (uses pcap library)...

http://www.adotout.com/
( DNS Flood Detector )

I can use it in "dump" mode to see the decoded queries (and source
addresses), or in daemon mode to notify me (and hence, my
security/firewalling tool) in real-time of misbehaving queries.

Regards,
Lew Payne

> tshark <http://www.wireshark.org/docs/man-pages/tshark.html> and its
> powerful DNS filter language
> <http://www.wireshark.org/docs/dfref/d/dns.html>
>
> dnscap <https://www.dns-oarc.net/tools/dnscap> a pain to compile but
> a very useful tool