BSD Ports

security/passivedns 1.2.1.25 DragonFly

Network sniffer that logs DNS replies for use in passive DNS setups

System
DragonFly
Repository
DPorts
Maintainer
[email protected] (as in FreeBSD)
License
GPLv2
Categories
security
Package size
27.0 KiB, 71.6 KiB installed

Description

A tool to collect DNS records passively to aid Incident handling, Network Security Monitoring (NSM) and general digital forensics.

PassiveDNS sniffs traffic from an interface or reads a pcap-file and outputs the DNS-server answers to a log file. PassiveDNS can cache/aggregate duplicate DNS answers in-memory, limiting the amount of data in the logfile without losing the essense in the DNS answer.

In the other systems

SystemPortVersion
DragonFlysecurity/passivedns1.2.1.25
FreeBSDsecurity/passivedns1.2.1.25_1

Install

Binary package:

pkg install passivedns

From DPorts:

cd /usr/dports/security/passivedns && make install clean

Dependencies

Run dependencies 3

No port depends on this one.

Configuration

No options to configure.

Service scripts
none

Message after installing

A startup script 'passivedns' was installed in /usr/local/etc/rc.d/.

Type "passivedns -h" on the commandline for usage instructions.