dnstop: stay on top of your DNS traffic

dnstop is a small utility that displays various tables of DNS traffic on your network. Currently it displays tables of:

  • Source IP addresses
  • Destination IP addresses
  • Query types
  • Response codes
  • Opcodes
  • Top level domains
  • Second level domains
  • Third level domains
  • etc…

Very useful to troubleshoot DNS attacks or generate realtime DNS statistics.