- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
Top DNS Clients with Drill Down
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
09-10-2018 07:44 AM
Has any one managed to Create a dashboard or report that shows top DNS talkers that then allows you to Drill down by clicking on one of the top talkers in the list, to see what the top talker is querying ?
e.g could have a crazy linux server in the list , but i want to see what it is querying as , it could be infected or badly configured.
is it possible ? Or is there lots of bells , hoops and whistles to go through ?
Re: Top DNS Clients with Drill Down
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
09-17-2018 07:18 AM
Hello Mark,
It is possible and not too hard but I have not done it, you have to get the source ip as a parameter for the search in the drilldown.
Regards
Nicolas
Re: Top DNS Clients with Drill Down
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
09-17-2018 05:26 PM
Hello Mark,
Check out my post here ,which should have the sourcecode that you're looking for.
Let me know if you have questions.
Best regards,
Mohammed Alman.