Any of the plugins will serve as a model. Ones that already process packets are your best bet, e.g. last seen.
-----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Han Dianfei Sent: Thursday, May 26, 2005 9:51 AM To: [email protected]; [email protected] Subject: [Ntop-dev] Any dns analysis plugin available? Hi, Is there a ntop plugin that can analyze dns traces(libpcap format)? Currently, I'm looking for a tool that can do some in-depth analysis such as finding out repeated queries, invalid TLDs, bogus A queries, etc. If there is no such a tool, I'm planning to build one myself. Is there any samples or instructions that I can follow? Thanks in advance! Any help would be appreciated. -- Han Dianfei <[EMAIL PROTECTED]> _______________________________________________ Ntop-dev mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-dev _______________________________________________ Ntop-dev mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-dev
