dnstop is a small utility that displays various tables of DNS traffic on your network. Currently it displays tables of:
- Source IP addresses
- Destination IP addresses
- Query types
- Response codes
- Opcodes
- Top level domains
- Second level domains
- Third level domains
- etc…
Very useful to troubleshoot DNS attacks or generate realtime DNS statistics.
Not only is dnstop a useful tool, it comes with a handy hash function library too.