A work in progres. This was originally forked from passivedns, so you're probably better off there!
Modifications to the original code
- Enabled checks for all qtypes and rcodes
emit.[ch]with support for ZeroMQ, Redis, and MQTT
-eto specify emitter output:
- For Redis:
- For MQTT:
- For Redis:
-Ofor specifying PUB topic (Redis and MQTT)
-Nfor specifying "nsid" (nameserver ID)
-voption to print additionally print emitted JSON to stdout
- Logging to files is now disabled unless
- See Issues.
- Get ElasticSearc. You need the version used by Logstash. At the time of this writing, that would be 0.20.5. Unpack it, and launch it:
- Get Logstash.
- Create a configuration for Logstash, based upon the example in my blog post.
- Launch Logstash:
java -jar logstash-1.1.12-flatjar.jar agent -f dns.conf -v
stash53, making sure you're using the correct network interface. Something like this, for Redis output, should do.
./stash53 -i eth0 # Interface -e 127.0.0.1/6379 # Redis host/port -l /dev/null -P 0 -O dns:hippo # list name for Redis
- Get Kibana3, and drop all the files on a Web server.
config.jsto have Kibana find your ElasticSearch server.
Please see the original README
This program includes libtai which is in the public domain.