DNSSCOPE(1)
π DNSSCOPE π
okay bestie, gather round, because this little icon from the PowerDNS Authoritative Server fam is about to become your new hyperfixation π«Ά it's a PowerDNS nameserver debugging tool, and yes it's giving "I read packet captures for fun" but like, in the cutest way possible π
β¨ SYNOPSIS β¨
dnsscope [OPTION]... INFILE
πΈ DESCRIPTION πΈ
so dnsscope takes an INFILE that's in PCAP format, right? and it just... generates some simple statistics, and outputs them to STDOUT. that's it. that's the whole vibe. no cap, it's literally that simple and I'm obsessed πβ¨
π OPTIONS π
INFILEβ the path to your PCAP file. your main character file, if you will π-h,--helpβ shows the help. bestie behavior fr fr, always there when you need it π«Ά--rdβ only processes packets in INFILE that have the RD (Recursion Desired) flag set. by default tho, we process all DNS packets in INFILE. so this one's for when you're feeling picky π--ipv4=<state>β processes IPv4 packets. it's on by default, so if you wanna shut it off you do--ipv4 false. turning off the default? bold. iconic. I support it π--ipv6=<state>β processes IPv6 packets. also on by default, disable it with--ipv6 false. same energy, different address family β¨-f,--filter-name=<domain>β only processes packets within this domain. keep your eyes on the prize, no distractions π―--full-histogram <msec>β writes out a histogram with the specified bin-size tofull-histogram. numbers!! pretty!! π--log-histogramβ writes out a log-histogram of response times tolog-histogram. the log girlies stay winning π--no-servfail-statsβ removes servfail responses from the latency statistics. sometimes you just gotta β¨curateβ¨ your data, y'know?--portβ the source and destination port to consider. default is looking at packets from and to ports53and5300. two ports, one queen π«Ά--servfail-treeβ figures out subtrees that generate servfails. detective mode: activated ππ--stats-dir <directory>β drops statistics files in this directory. defaults to./β which is literally just wherever you already are, cozy π-l,--load-statsβ emits per-second load statistics (questions, answers, outstanding). the full trio, we love a complete set β¨-w <file>,--write-failures <file>β writes weird packets to a PCAP file at FILENAME. yes, the weird ones. they go in the jar π«-v,--verboseβ be more verbose. talk more. give us the details. we're listening ππ
π SEE ALSO π
pcap(3PCAP)tcpdump(8)
π AUTHOR π
PowerDNS.COM BV
π COPYRIGHT π
PowerDNS.COM BV
ngl, if you got this far you're officially a packet-capture baddie. go forth and inspect those DNS packets, bestie π π₯
so yeah, that's dnsscope from the PowerDNS Authoritative Server, dated Aug 05, 2026. slay, periodt, and remember: the RD flag doesn't stand for "really desirable", it stands for Recursion Desired, iykyk πβ¨π¦
π¦ where this page comes from
- alpine 3.24: pdns-doc 5.0.7-r0 Β· GPL-2.0-only WITH OpenSSL-Exception
- debian trixie: pdns-tools 4.9.17-0+deb13u1 Β· GPL-2.0-only WITH OpenSSL Exception
- epel 10: pdns-tools 5.0.7-1.el10_3 Β· GPL-2.0-only
- epel 9: pdns-tools 5.0.7-1.el9 Β· GPL-2.0-only
- fedora 43: pdns-tools 5.0.7-1.fc43 Β· GPL-2.0-only
- fedora 44: pdns-tools 5.0.7-1.fc44 Β· GPL-2.0-only
- ubuntu stonking: pdns-tools 5.1.4-1 Β· GPL-2.0-only WITH OpenSSL Exception
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms