Skip to content

Conversation

@weyrick
Copy link
Contributor

@weyrick weyrick commented Dec 6, 2021

Implement support for https://dnstap.info

Unix domain sockets and TCP streams are supported. Sample config:

version: "1.0"

visor:
  taps:
    unix_dnstap:
      input_type: dnstap
      config:
        socket: "/tmp/dnstap.sock"
    tcp_dnstap:
      input_type: dnstap
      config:
        tcp: "127.0.0.1:53053"
  policies:
    mysocket:
      kind: collection
      input:
        tap: unix_dnstap
        input_type: dnstap
      handlers:
        modules:
          default_net:
            type: net
          default_dns:
            type: dns
    mytcp:
      kind: collection
      input:
        tap: tcp_dnstap
        input_type: dnstap
      handlers:
        modules:
          default_net:
            type: net
          default_dns:
            type: dns

There is also a new tool pktvisor-dnstap which is analogous to pktvisor-pcap and can read dnstap binary save files written by https://github.com/dnstap/golang-dnstap

@weyrick weyrick requested review from a user, fcelda and jroyalty December 16, 2021 21:48
@jroyalty
Copy link

Thanks for the heads up @weyrick

@weyrick weyrick merged commit 0ad88d0 into develop Dec 17, 2021
@weyrick weyrick deleted the feature/12-dnstap branch December 17, 2021 19:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants