DNS module: Difference between revisions

DNS module (view source)

Revision as of 15:24, 20 May 2020

1,759 bytes added , 20 May 2020

no edit summary

Ralf

546

edits

@@ Line 10: / Line 10: @@
 |}
-'''IPs'''
+== Main view ==
+=== DNS server ===
+This tab shows all DNS servers in the network for which DNS traffic has been seen.
+For each server the number of requests and responses are shown including a history. The table allows to go to a detailed page for the DNS server (DNS server details), the generic IP details page, and to the connections of the IP server.
+=== Resolved names ===
 This tab shows a table with all IP addresses and its name based on seen DNS request and response pairs.
@@ Line 17: / Line 25: @@
-'''Server response times'''
+=== Server response times ===
 The response times tab shows global and per DNS server statistics about response times between a DNS request by a client and the response by the server.
@@ Line 24: / Line 32: @@
-'''Server reply codes'''
+=== Server reply codes ===
 This tab shows reply codes globally and per DNS server in a list. Graphs show the distribution over time.
@@ Line 37: / Line 45: @@
-'''DNS record types'''
+=== DNS record types ===
+This tab shows the amount of DNS record types globally for all DNS server. Detailed graphs are available for the most commonly used record types A, AAAA, CNAME and MX
+== DNS server details ==
+The server details page shows an overview for the selected DNS server and a detailed list of DNS lookup response times for each individual DNS connection. Also, the unanswered DNS requests are shown and the non-existing names.
+=== Overview ===
+The overview tab shows DNS statistics for the selected DNS server, including the number of requests and responses, the average response time, and the historical graph.
+=== Lookup response times ===
+This tab lists all DNS connection and shows when the request happened, the response time and the name and status code.
+The list of connections can be filtered, for example to search for specific names, or for specific status codes.
+For example, the filter expression '''(dnsstatus==2)''' shows all DNS connections with a server failure.
+The list can also be downloaded to get all matching connections as CSV file for further processing.
+=== Unanswered requests ===
+This tab shows the unique number of DNS names that have not been answered by the current DNS server. It is possible to click on the number to filter the connection table below to that specific name.
-This tab shows the amount of DNS record types globally for all DNS server. Detailed graphs are availble for the most commonly used record types A, AAAA, CNAME and MX
+=== Non-existing domains ===
+This tab shows the unique number of DNS names that has been rejected by the DNS server for being not existing. It is possible to click on the number to filter the connection table below to that specific name.