Monitor DNS queries toward Root severs

Stephane Bortzmeyer bortzmeyer at
Wed May 4 14:10:36 UTC 2016

On Wed, May 04, 2016 at 07:03:13PM +1000,
 Mark Andrews <marka at> wrote 
 a message of 15 lines which said:

> fill in with the rest of the root servers names.

And if you don't like to type, or if you use another root:

sudo tcpdump -n -i ${INTERFACE} port 53 and \( $(for ns in $(dig +nodnssec +short NS .); do echo host $(dig +short +nodnssec AAAA $ns) or; done) host 2001:db8:ffff:ffff::1 \)
# Last (dummy) host just to use the last "or"

More information about the bind-users mailing list