tools for analyzing dnssec


This is a number of tools to collect DNS data for DNSSEC analysis.   cleans a (signed) zone and extracts all domains (lnames) with DS records     collects all DNSSEC related data for later analysis (outputs JSON)     for analysis of the JSON files with DNS info  


Example usage, batch for a lot of domains:

# create a list from a signed zone file -f zonefile > domainlist.txt
# run -f domainlist.txt -d directory
# do some analysis -d directory --rcode     # analyze return codes -d directory --servfail  # toplist of name servers with SERVFAIL

Or just get data from a domain: --pretty -n