From owner-freebsd-questions  Mon Mar 22 19:18:25 1999
Delivered-To: freebsd-questions@freebsd.org
Received: from nafm.misawa.af.mil (nafm.misawa.AF.MIL [132.20.165.37])
	by hub.freebsd.org (Postfix) with ESMTP id 6C2EC15334
	for <freebsd-questions@freebsd.org>; Mon, 22 Mar 1999 19:17:53 -0800 (PST)
	(envelope-from Olivassq@nafm.misawa.af.mil)
Received: by nafm.misawa.AF.MIL with Internet Mail Service (5.5.2448.0)
	id <HFJPK6Z9>; Tue, 23 Mar 1999 12:14:14 +0900
Message-ID: <55E8DFF7F828D211A46500104B226B0B0F1F30@nafm.misawa.AF.MIL>
From: "Olivas, Stacy Q" <Olivassq@nafm.misawa.af.mil>
To: 'FreeBSD Questions' <freebsd-questions@freebsd.org>
Subject: TCPDUMP output
Date: Tue, 23 Mar 1999 12:14:13 +0900
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2448.0)
Content-Type: text/plain;
	charset="iso-8859-1"
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Hello,
I'm working on a little DNS monitoring project..

I have a small caching nameserver setup that feeds machines in a subnet.

To monitor where they have been, I've setup tcpdump to watch port 53 on the
machine for all traffic (it's only used for this pupose).. Everyday it
automatically rolls the logfiles over and sends a copy to me via e-mail (the
machine is an a secure area that I don't access on a regular basis).

My question is:

1.  Is there a program (preferably unix, but can be a windows based program)
that would allow me to have the logs formatted something easier to analyze
or
2.  Is there a program that would allow me (short of setting up a proxy)
monitor this sort of thing in an easier way??

I was thinking about writing a custom utility to analyze this stuff, but I
figured I might want to ask before doing so (just to save myself some
time)..

Thanks in advance.
Stacy Olivas



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message