-
-
Notifications
You must be signed in to change notification settings - Fork 50
/
use-case-7.yml
37 lines (33 loc) · 1.03 KB
/
use-case-7.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
# This configuration sets up DNS traffic monitoring through DNStap on port 6000 and port 6001;
# and logs in text file.
#
# As prerequisites, we assume you have
# - a DNS server which supports DNSTap (unbound, bind, powerdns, etc) for more informations about dnstap,
# read the following page: https://dmachard.github.io/posts/0001-dnstap-testing/
# If turned on, debug messages are printed in the standard output
global:
trace:
verbose: true
pipelines:
# Listen on tcp/6000 and tcp/6001 for incoming DNSTap protobuf messages
# from several servers
- name: tap1
dnstap:
listen-ip: 0.0.0.0
listen-port: 6000
# Routes DNS messages from the tap 1 and 2 to the same file destination
routing-policy:
forward: [ file ]
- name: tap2
dnstap:
listen-ip: 0.0.0.0
listen-port: 6001
routing-policy:
forward: [ file ]
# Write DNS logs to a local file in TEXT format
- name: file
logfile:
file-path: "/tmp/dnstap.log"
max-size: 100
max-files: 10
mode: text