Debug a DNS Server

Info debug DNS Server.txt

# tcpdump -nni eth0  dst port 53 -c 100000 -s 512 -C 10M -w /tmp/dnscapture.pcap

# chkconfig --list |grep iptable

# sbin/rndc  status

# ip addr show

# sar -n DEV 1 60

# ip route show

# free -m

# sar 1 60

interface de production DNS. A faire pour chaque interface de production DNS.
# dnstop ethX -QR (type t)  

# dnstop -QR eth0

# tcpdump -nni any port 53  | grep pv.cc 

# ps -ef | grep named

# tcpdump -r /tmp/dnscapture.pcap -c 5000 | grep -Eo '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}'|while read p ; do ip route get $p |grep via  |awk '{print $3 }' ; done  | sort | uniq -c | sort -nrk1

 ntop -f tmp_cap.pcap.test -no -p "DNS="53" -L