Golang DNSTAP sensor use to collect passive dns data from a recursive name server

dnstap-sensor

DNSTAP-SENSOR is a Golang program that is used to collect passive dns data from a recursive name server and submit it to Deteque's DNSTAP collectors.

Overview

Bind, Unbound and PowerDNS have native support for capturing DNS traffic using DNSTAP. The Deteque DNSTAP-SENSOR is designed to accept DNSTAP from the nameserver and forward it securely to Deteque's collectors.

The DNSTAP-SENSOR application is a Go program that creates a socket that the nameserver connects to and accepts the dns log data. As such, the DNSTAP-SENSOR should be started before the recursive nameserver daemon starts. Additionally, the nameserver must be configured to connect to that socket. While the socket can be mounted anywhere, we recommend that the socket be located in the same directory that DNSTAP-SENSOR's configuration file resides, which is "/etc/dnstap".

Documentation

Full installation and configuration settings are available at:
https://deteque.com/dnstap-sensor/

Downloading DNSTAP-SENSOR

Pre-compiled binaries are avaialble from the above URL. We currently provide binaries for the following platforms:

  • Linux amd64 Debian/Ubuntu/Redhat/Fedora/Amazon Linux
  • Linux arm64. Raspberry Pi OS
  • Linux arm32. Raspberry Pi OS
  • Solaris amd64 Solaris
  • FreeBSD amd64 FreeBSD
  • OpenBSD amd64 OpenBSD
  • NetBSD amd64 NetBSD

The source code and sample configuration file are is available three ways - as an https transfer, via Github or as a prebuilt Docker image:

Owner
Andrew Fried
Deteque provides DNS firewall data feeds and services based on response policy zones (RPZ).
Andrew Fried
https://github.com/deteque/dnstap-sensor
Similar Resources

Server motherboard hardware monitoring

hardware-events This software helps with the monitoring of a server motherboard. The project started when I changed the FANs on a Supermicro motherboa

Jan 24, 2022

Golang framework for robotics, drones, and the Internet of Things (IoT)

Golang framework for robotics, drones, and the Internet of Things (IoT)

Gobot (https://gobot.io/) is a framework using the Go programming language (https://golang.org/) for robotics, physical computing, and the Internet of

Dec 29, 2022

Golang implementation of PyMISP-feedgenerator

Go-MispFeedGenerator Generate MISP feeds without a MISP Instance! Go-MispFeedGenerator aka Go-MFG1000, is a library providing all functions needed to

Nov 23, 2022

Gobot - Golang framework for robotics, drones, and the Internet of Things (IoT)

Gobot - Golang framework for robotics, drones, and the Internet of Things (IoT)

Gobot (https://gobot.io/) is a framework using the Go programming language (https://golang.org/) for robotics, physical computing, and the Internet of Things.

Jan 8, 2023

🐼 IoT worm written in pure golang.

🐼 IoT worm written in pure golang.

GoriaNet Most powerfull cross compiler (27arch). Kill process by port and check for duplicate instance. Killing process by port. Cross compiler. Infor

Oct 17, 2022

Upbit auto trading bot with golang

Upbit auto trading bot with golang

Upbit auto trading bot How to Golang (download) Input 'Access key', 'Secret key'

May 11, 2022

Smq - Simple MQTT Broker with golang

Simple MQTT Broker 关于 Golang MQTT Broker, Version 3.1.1, and Compatible for ecli

Jul 7, 2022

Courier Golang client library provides an opinionated wrapper over paho MQTT library to add features on top of it

Courier Golang Client Library Introduction Courier Golang client library provides an opinionated wrapper over paho MQTT library to add features on top

Nov 19, 2022

The main goal of this code is to create a basic dnstap printing tool based on the golang-dnstap library.

dnstap-parse The main goal of this code is to create a basic dnstap printing tool based on the golang-dnstap library. The output is supposed to mimic

Nov 14, 2021

GRONG is a DNS (Domain Name System) authoritative name server.It is more a research project than a production-ready program.

GRONG (Gross and ROugh Nameserver written in Go) is a DNS (Domain Name System) authoritative name server. It is intended as a research project and is

Oct 17, 2020

Privacy important, fast, recursive dns resolver server with dnssec support

Privacy important, fast, recursive dns resolver server with dnssec support

🚀 Privacy important, fast, recursive dns resolver server with dnssec support Installation go get github.com/semihalev/sdns Pre-build Binaries Downloa

Dec 26, 2022

DNS server using miekg/dns offering dynamic subdomains, time-over-dns, and standard zone file support.

dns-go DNS server using miekg/dns offering dynamic subdomains, time-over-dns, and standard zone file support. dynamic subdomains web.myapp.192.168.1.1

Dec 14, 2021

A Golang program that receives DNSTAP traffic and relays it to multiple other listeners.

socket-proxy socket-proxy is a Golang program that is used to proxy dnstap messages from one socket to multiple other sockets. Overview Name Servers t

Jan 10, 2022

Hetzner-dns-updater - A simple tool to update a DNS record via Hetzner DNS API. Used for simple HA together with Nomad

hetzner-dns-updater A small utility tool to update a single record via Hetzner D

Feb 12, 2022

Plant environment data sensor aggregation / UI server.

Plant environment data sensor aggregation / UI server.

What? A pet project to design a simple garden sensor and custom server for aggregating data and providing a simple user interface. Nginx gateway for s

Dec 10, 2022

A small tool used to correspond to the IP address according to the name, id, and network alias of the docker container, which can be run as a DNS server

A small tool used to correspond to the IP address according to the name, id, and network alias of the docker container, which can be run as a DNS server

Apr 4, 2022

A minimalist-configuration reverse DNS name server

autoreverse autoreverse is a specialized authoritative DNS server whose goal is to make it as easy as possible to auto-answer reverse queries without

Feb 14, 2022

Takes a full name and splits it into individual name parts

gonameparts gonameparts splits a human name into individual parts. This is useful when dealing with external data sources that provide names as a sing

Sep 27, 2022

Email-searcher - Given a domain name and real name, attempt to find an existing email for that user.

email-searcher Given a domain name and real name, attempt to find an existing email for that user. Using Run it with both the domain and name flags, l

Jan 2, 2022
Related tags
IoT (Internet of Things) dnstap-sensor
A realtime teenage driver behaviour monitoring system integrating OBII sensor, smart watch, smartphone, and Raspberry Pi, which examines over time novice teenage driving performance and risk

DriverMonitor A realtime teenage driver behaviour monitoring system integrating OBII sensor, smart watch, smartphone, and Raspberry Pi, which examines

Nov 27, 2021
A small program that serves BM**80 sensor info as JSON

ThermoServer This program was written for a Raspberry Pi using Pimoroni's BMP280 breakout. Chances are it'll also work with the BME280 and BME680, but

Jan 12, 2022
A project outputs Bluetooth Low Energy (BLE) sensors data in InfluxDB line protocol formatA project outputs Bluetooth Low Energy (BLE) sensors data in InfluxDB line protocol format

Intro This project outputs Bluetooth Low Energy (BLE) sensors data in InfluxDB line protocol format. It integrates nicely with the Telegraf execd inpu

Apr 15, 2022
A robust and easy to use MQTT rule engine
 A robust and easy to use MQTT rule engine

⚙ MQTT COMMANDER A robust and easy to use MQTT rule engine Configure your MQTT Rules via easy to use YML Files Supports JSON encoded MQTT Messages Sup

Sep 21, 2022
IoT Manager: use IoT platforms with Mender

Mender: Azure IoT Manager: use Azure IoT with Mender General Mender is an open source over-the-air (OTA) software updater for embedded Linux devices.

Jan 10, 2022
An embeddable lightweight Go/Golang MQTT broker(server) for IoT.
 An embeddable lightweight Go/Golang MQTT broker(server) for IoT.

Snple MQTT 简体中文 Note: The API of this library is still unstable and has not been sufficiently tested, please do not use it in production environments.

Sep 12, 2022
Make IoT a lot more fun with data.

Eywa What is Eywa? "Eywa is the guiding force and deity of Pandora and the Na'vi. All living things on Pandora connect to Eywa." -- Avatar Wiki Projec

Nov 28, 2022
mqtt-rewriter is a tool that can forward data from a topic to another topic.

mqtt-rewriter Background mqtt-rewriter is a tool that can forward data from a topic to another topic. Install Todo... Usage Currently only supports tw

Feb 18, 2022
IP Camera Alarm Server to MQTT

IP Camera Alarm Server Universal Alarm Server for all your IP cameras in one place! Integrates well with Home Assistant, Node-Red, etc. Runs great on

Dec 8, 2022
handle multiple mqtt server/cluster based on paho client

pakhshi Introduction Consider you have an array of brokers but you want to publish and subscribe on all of them at the same time. Why you may need thi

Nov 9, 2022