drool(1)

📦 version 2.0.0, in debian bookworm, debian trixie, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💖 drool — the DNS Replay Tool, bestie edition 💖

okay so. this is drool(1), a General Commands Manual page, and honestly? she's iconic. let's get into it 🫶

✨ NAME ✨

drool — DNS Replay Tool. that's it. that's the name. slay.

✨ SYNOPSIS ✨

drool command [ options ] < arguments >

✨ DESCRIPTION ✨

so like, drool can replay DNS traffic straight out of packet capture (PCAP) files and yeet it at whatever server you tell her to. she's got options too — you can mess with the timing between packets, loop the packets forever, or loop them a set number of iterations. the whole goal here is to produce a high amount of UDP packets per second and TCP sessions per second on common hardware. like, that's the assignment and she ate. 🔥

the purpose? a couple things:

  • simulate Distributed Denial of Service (DDoS) attacks on the DNS
  • measure normal DNS querying

for example (real scenario, not me making things up): you could take a snapshot of a DDoS and replay it later to test whether your new code or your hardening techniques are actually useful, safe & effective. another one: you can replay a packet stream for a bug that's sequence- and/or timing-related, so you can validate whether the subsequent bug fixes actually work. it's giving forensics but make it chaotic. 💅

✨ COMMANDS ✨

drool is split up into different commands for different scenarios. each command has its own man-page, may take different arguments, and may have additional options. main character energy, per-command.

  • replay — Replay DNS from a PCAP file, see drool-replay(1).
  • respdiff — Replay DNS and store the responses along with the responses found in the PCAP for analysis with the respdiff tool-chain, see drool-respdiff(1).

✨ OPTIONS ✨

these options are generic for all drool commands. so they work no matter which one you pick. periodt.

  • --csv — Output statistics as CSV.
  • --json — Output statistics as JSON.
  • -v, --verbose — Enable verbose logging. you can hand this over multiple times to crank the verbosity level up and up and up. 📈
  • -h, --help — Print help and exit.
  • -V, --version — Print version and exit.

✨ EXIT VALUES ✨

  • 0 — no error 🎀
  • 1 — generic error 😭

✨ SEE ALSO ✨

✨ AUTHORS ✨

Jerry Lundström, DNS-OARC

Maintained by DNS-OARC

https://www.dns-oarc.net/

✨ BUGS ✨

for issues and feature requests please use:

https://github.com/DNS-OARC/drool/issues

for questions and help please use:

admin@dns-oarc.net
ngl if you found a bug, go tell them, they wanna know fr fr 🙈

and that's the whole page bestie!! 💖 this is drool(1) from the DNS Replay Tool, version 2.0.0, and yeah the date on the original footer was just the manpage date thing so — mwah, go replay some packets, ily, bye 🦋✨👑

📦 where this page comes from