[SOLVED] Sniff domain resolve requests.

ruivilela · Last edited by ruivilela on Thu Feb 11, 2010 3:13 pm; edited 1 time in total

I've a server running dnsmasq which acts like dhcp server and local DNS (which i control)

Question? How can I see the domain names that are being resolved by the server and the one that are forwarded?

My first guest is to use tcpdump. Is there a specific tool for this?

msalerno · Posted: Tue Feb 09, 2010 2:45 pm Post subject:

dnsmasq is a caching dns forwarder. So initially all DNS queries are forwarded and then cached on the server for the TTL. What is your objective for trying to figure this out?
_________________
When harmonious relationships dissolve
Then respect and devotion arise;
When a nation falls to chaos
Then loyalty and patriotism are born.
-Lao Tse

ruivilela · Posted: Thu Feb 11, 2010 9:00 am Post subject:

To log all domains that are asked to server to find out the IP address.

Ok. I found my solution through tcpdump

msalerno · Posted: Thu Feb 11, 2010 4:05 pm Post subject:

Check out dnstop, it's in portage.
_________________
When harmonious relationships dissolve
Then respect and devotion arise;
When a nation falls to chaos
Then loyalty and patriotism are born.
-Lao Tse