queries to DNS server

David Nolan vitroth+ at cmu.edu
Fri Sep 28 16:58:50 UTC 2007

--On Friday, September 28, 2007 12:16:38 -0400 John Wobus 
<jw354 at cornell.edu> wrote:

> Another method, that easily gets you a quick sample of your clients is
> using
> tcpdump (or snoop).  Collect X number of packets (e.g. 10,000) and see
> who's
> calling you.

Or you can use dnstop, which does traffic sniffing and analyzes the DNS 
traffic seen by your host.


More information about the bind-users mailing list