queries to DNS server
vitroth+ at cmu.edu
Fri Sep 28 16:58:50 UTC 2007
--On Friday, September 28, 2007 12:16:38 -0400 John Wobus
<jw354 at cornell.edu> wrote:
> Another method, that easily gets you a quick sample of your clients is
> tcpdump (or snoop). Collect X number of packets (e.g. 10,000) and see
> calling you.
Or you can use dnstop, which does traffic sniffing and analyzes the DNS
traffic seen by your host.
More information about the bind-users