OpenBSD Handbook

Current snapshot · amd64 · Generated 2026-09-09

dnstop-20240708

pcap-based DNS query monitor

Back to search · Project homepage

Description

dnstop is a libpcap application (a la tcpdump) that displays various tables of DNS traffic on your network. Currently dnstop displays tables of: * Source IP addresses * Destination IP addresses * Query types * Response codes * Opcodes * Top level domains * Second level domains * Third level domains * etc... dnstop supports both IPv4 and IPv6 addresses. To help find especially undesirable DNS queries, dnstop provides a number of filters. The filters tell dnstop to display only the following types of queries: * For unknown/invalid TLDs * A queries where the query name is already an IP address * PTR queries for RFC1918 address space

Package information

Ports path
net/dnstop
Package architecture
amd64
Maintainer
The OpenBSD ports mailing-list <ports@openbsd.org>
Categories
net
Available flavors
None listed

These are ports metadata. Binary availability depends on the release, architecture and mirror. Build and test dependencies are not an installation checklist.

Direct dependencies

None listed in sqlports.

Installing and updating packages · Package details as JSON