dnsscope¶

Synopsis¶

dnsscope [OPTION]… <INFILE>

Description¶

dnsscope takes an INFILE in PCAP format. It generates some simple statistics outputs these to STDOUT.

Options¶

INFILE¶

Path to a PCAP file.

-h, --help¶

Show the help.

--rd¶

Only process packets in INFILE with the RD (Recursion Desired) flag set. By default, we process all DNS packets in INFILE.

--ipv4=<STATE>¶

Process IPv4 packets. On by default, disable with --ipv4 false.

--ipv6=<STATE>¶

Process IPv6 packets. On by default, disable with --ipv6 false.

-f <DOMAIN>, --filter-name=<DOMAIN>¶

Only process packets within this domain

--full-histogram <MSEC>¶

Write out histogram with specified bin-size to ‘full-histogram’

--log-histogram¶

Write out a log-histogram of response times to ‘log-histogram’

--no-servfail-stats¶

Remove servfail responses from latency statistics

--port <PORT>¶

The source and destination port to consider. Default is looking at packets from and to ports 53 and 5300.

--servfail-tree¶

Figure out subtrees that generate servfails.

--stats-dir <DIRECTORY>¶

Drop statistics files in this directory. Defaults to ./.

-l, --load-stats¶

Emit per-second load statistics (questions, answers, outstanding).

-w <FILE>, --write-failures <FILE>¶

Write weird packets to a PCAP file at FILE.

-v, --verbose¶

Be more verbose.

See also¶

pcap(3PCAP), tcpdump(8)