dnstop is a command-line tool that allows you to monitor and display DNS (Domain Name System) server traffic on your network. It can be used to troubleshoot DNS issues, monitor DNS traffic patterns, and track the performance of DNS servers.
To use dnstop, you need to install it first. On a CentOS or Red Hat Enterprise Linux (RHEL) system, you can install it using the dnf package manager:
dnf install dnstop
On a Debian or Ubuntu system, you can install it using the apt-get package manager:
apt-get install dnstop
Once dnstop is installed, you can use it to monitor DNS traffic on a specific interface by running the following command:
dnstop -i interface
For example, to monitor DNS traffic on the eth0 interface, you would run:
dnstop -i eth0
dnstop will display a real-time list of DNS queries and responses, including the source and destination IP addresses, the domain names being queried, and the type of query (such as A, AAAA, or MX).
You can use the -l option to specify a log file to store the DNS traffic data, and the -t option to specify the duration of the capture. You can also use the -h option to display a list of all available options.
dnstop is a useful tool for tracking DNS traffic on your network and identifying any issues or patterns that may be causing problems.