Tag Info

New answers tagged

1

Fundamentally, the easiest way to get this information is from tcpdump. I've been doing something similar recently myself, but looking for different patterns. You may find some of what I have done to be useful for you. http://distracted-it.blogspot.co.nz/search/label/dns http://distracted-it.blogspot.co.nz/2014/07/capturing-and-analysing-dns-samples.html ...


3

1 - query logging Enable query logging rndc querylog and parse your log files, like this: grep -Eo "client ([0-9]{1,3}[\.]){3}[0-9]{1,3}" /path/to/logfile | sort -u | uniq client 10.0.252.1 client 10.0.231.15 client 127.0.0.1 excluding duplicates | uniq and | wc -l to count them, but don't mind to find a real solution that will be really accurate and ...



Top 50 recent answers are included