[dnstop] Source in Query
Duane Wessels
wessels at measurement-factory.com
Tue Sep 8 16:21:34 UTC 2009
On Mon, 7 Sep 2009, David Wormuth wrote:
> I figured out what the period means in the Query Name. I configured my iptables to drop those queries, but dnstop is still showing
> them. Is that because dnstop is inspecting raw packets and not showing me what the actual nameserver is receiving?
Hi David,
You are correct. dnstop is seeing the packets hitting your network
interface before they get dropped by iptables.
Duane W.
More information about the dnstop
mailing list