20 Jul 2012
Lesser known DNS tools and BIND tricks
A talk at the german unix user group (GUUG) meeting on 2nd August 2012 in Berlin. The name of the talk is "Lesser known DNS tools and BIND tricks".
The slides
- Direct Link: Lesser known DNS tools and BIND tricks
- PDF Version Lesser known DNS tools and BIND tricks
Tools mentioned in the talk
| command | package / project | webpage | description |
|---|---|---|---|
| dnsget | udns | http://www.corpit.ru/mjt/udns.html | simple dns lookup tool |
| dig | bind9 | http://isc.org | generic dns lookup tool |
| dnsmap | dnsmap | http://code.google.com/p/dnsmap/ | brute force dns zone mapper |
| adnshost | adns | http://www.chiark.greenend.org.uk/~ian/adns/ | fast, asynchronous dns lookup tool |
| adnsresfilter | adns | http://www.chiark.greenend.org.uk/~ian/adns/ | dns IP to name resolution as a filter |
| avahi-browse | avahi | http://avahi.org | browse multicast DNS services |
| mdns-scan | mdns-scan | http://0pointer.de/lennart/projects/mdns-scan/ | browse multicast DNS service |
| ldns-mx | ldns | http://www.nlnetlabs.nl/projects/ldns/ | lookup mail server for a domain |
| dnstree | dnsbrowse | http://www.isi.edu/~johnh/SOFTWARE/DNS/ | terse display of a zone |
| lookup | dnssec-tools | http://www.dnssec-tools.org/ | graphical DNS and DNSSEC lookup tool |
| ldns-chaos | ldns | http://www.nlnetlabs.nl/projects/ldns/ | find version of DNS server |
| fpdns | fpdns | https://github.com/kirei/fpdns | fingerprint DNS server version |
| echoping | echoping | http://echoping.sourceforge.net/ | measure DNS server latency |
| dnstop | dnstop | http://dns.measurement-factory.com/tools/dnstop/ | monitor local DNS traffic |
| dnscap | dnscap | https://www.dns-oarc.net/tools/dnscap/ | capture DNS traffic |
| dnspktflow | dnssec-tools | http://www.dnssec-tools.org/ | visualize DNS traffic in a network |
| dnstracer | dnstracer | http://www.mavetju.org/unix/dnstracer.php/ | displays the DNS delegation tree |
| dnswalk | dnswalk | http://sourceforge.net/projects/dnswalk/ | validate a DNS zone |
| zonecheck | zonecheck | http://zonecheck.fr | DNS zone debugger |
| mapper | dnssec-tools | http://www.dnssec-tools.org/ | graphically display the content of a zone file |
| DNSSEC-check | dnssec-tools | http://www.dnssec-tools.org/ | test DNSSEC caching resolver capabilities |
| sshfp | sshfp | http://www.xelerance.com/services/software/sshfp/ | generate SSHFP records from knownhosts |
| ldns-walk | ldns | http://www.nlnetlabs.nl/projects/ldns/ | "walks" a NSEC signed zone |
| walker | walker | http://josefsson.org/walker/ | "walks" a NSEC signed zone |
| drill | ldns | http://www.nlnetlabs.nl/projects/ldns/ | clone of 'dig' with extra functions |
| unbound-host | unbound | http://unbound.net | the ultimate DNS/DNSSEC troubleshooting tool |
| donuts | dnssec-tools | http://www.dnssec-tools.org/ | validates a DNSSEC signed zone |
| ldns-verify | ldns | http://www.nlnetlabs.nl/projects/ldns/ | validates a DNSSEC signed zone |
| named-checkconf | bind9 | http://isc.org | verifies a BIND 9 configuration file and zones |
| named-checkzone | bind9 | http://isc.org | verifies a DNS master zone file |
| named-compilezone | bind9 | http://isc.org | converts a zone file between text and binary format |
| named-journalprint | bind9 | http://isc.org | prints the content of a BIND 9 journal file |
| nsupdate | bind9 | http://isc.org | sends DNS dynamic updates to a DNS server |
