[dnstop] Source in Query

Duane Wessels wessels at measurement-factory.com
Tue Sep 8 16:21:34 UTC 2009




On Mon, 7 Sep 2009, David Wormuth wrote:

> I figured out what the period means in the Query Name. I configured my iptables to drop those queries, but dnstop is still showing
> them. Is that because dnstop is inspecting raw packets and not showing me what the actual nameserver is receiving?

Hi David,

You are correct.  dnstop is seeing the packets hitting your network
interface before they get dropped by iptables.

Duane W.



More information about the dnstop mailing list