Files
coredns/middleware/dnstap/README.md
varyoo 345dee82ed IP endpoint for dnstap (#1002)
* adds the option to log to a remote endpoint

* examples

* tests

* tcp:// or default to unix://

* cosmetic update

* bad naked returns
2017-09-01 14:07:21 +02:00

1.3 KiB

dnstap

dnstap enables logging to dnstap, a flexible, structured binary log format for DNS software: http://dnstap.info.

There is a buffer, expect at least 13 requests before the server sends its dnstap messages to the socket.

Syntax

dnstap SOCKET [full]
  • SOCKET is the socket path supplied to the dnstap command line tool.
  • full to include the wire-format DNS message.

Examples

Log information about client requests and responses to /tmp/dnstap.sock.

dnstap /tmp/dnstap.sock

Log information including the wire-format DNS message about client requests and responses to /tmp/dnstap.sock.

dnstap unix:///tmp/dnstap.sock full

Log to a remote endpoint.

dnstap tcp://127.0.0.1:6000 full

Dnstap command line tool

go get github.com/dnstap/golang-dnstap
cd $GOPATH/src/github.com/dnstap/golang-dnstap/dnstap
go build
./dnstap

The following command listens on the given socket and decodes messages to stdout.

dnstap -u /tmp/dnstap.sock

The following command listens on the given socket and saves message payloads to a binary dnstap-format log file.

dnstap -u /tmp/dnstap.sock -w /tmp/test.dnstap

Listen for dnstap messages on port 6000.

dnstap -l 127.0.0.1:6000