tshark is a command-line vrsion of powerfull Wireshark packet analyzer, which may be used for analyzing of DNS question/answer process. tshark is not preinstalled linux distributions. For debian we can installed it directly from the debian repository:

apt-get install tshark

tshark -f "udp port 53" -R "dns.qry.type == A and dns.flags.response == 0"

Pridaj komentár

Vaša e-mailová adresa nebude zverejnená. Vyžadované polia sú označené *