Closed cermmik closed 6 years ago
Utilize IP flows extended by DNS information for following applications:
[x] Compute basic DNS statistics (allow for both the whole network and subnets)
Top query types
Top response codes
Top queried domains
Top queried non-existing domains
Top queried external DNS servers
Top queried local domains
Top devices with the most DNS requests
[x] Detection usage of external DNS resolvers
[x] Detection of open DNS resolvers (add amplification attack detection if possible)
Also prepare web-interface for each application.
Merged and done :)
Utilize IP flows extended by DNS information for following applications:
[x] Compute basic DNS statistics (allow for both the whole network and subnets)
Top query types
Top response codes
Top queried domains
Top queried non-existing domains
Top queried external DNS servers
Top queried local domains
Top devices with the most DNS requests
[x] Detection usage of external DNS resolvers
[x] Detection of open DNS resolvers (add amplification attack detection if possible)