gamelinux / passivedns

A network sniffer that logs all DNS server replies for use in a passive DNS setup

Home Page:http://gamelinux.org/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Can this deals with big scale DNS flow?

gao-hui opened this issue · comments

Can this program deals with big scale dns flow, like 1TB per day of bro dns logs?

I assume, depending on your hardware.
For my big pipe, I used to use pf_ring and zbalance to start more passivedns processes to share the load. Worked great. But I did not want to depend on pf_ring, so I wrote a passivedns version in golang. This does not seem to have any performance issues at all on the traffic I have tested it on.

@gamelinux : "a passivedns version in golang" ...? Is that available somewhere?

No. I wrote it while learning Go, and to see if it was possible. I started re-writing it for a release here on github, but $time.....