Re: [dns-operations] cheap traffic measure for a small set of zones

2021-03-26 Thread Tony Finch 
Randy Bush  wrote:

> is there a simple tool to run on a server to measure query and data
> rates for a small set of zones?  i just want to run it for a day.
>
> it is a a bind9 server which serves a few hundred zones.  i would like
> to know the query rate and byte count for six of them.

I usually use BIND's built-in statistics server for this kind of thing,
but it looks like it can count queries per zone but not bytes per zone.
(my servers are configured with `zone-statistics full;`)

e.g.

$ curl -sf http://auth0:8053/json/v1 |
jq -r '.views.main.zones[] |
"\(.name) \((.rcodes.QryUDP) + (.rcodes.QryTCP))"' |
grep ^cam.ac.uk
cam.ac.uk 1294381958

That's queries since the server started.

[ jq is a bit of a puzzle language; I often prefer gron | grep ]

https://stedolan.github.io/jq/
https://github.com/TomNomNom/gron

Tony.
-- 
f.anthony.n.finchhttps://dotat.at/
Fair Isle: Westerly, backing southerly later, 5 to 7, perhaps gale 8
later in west. Rough or very rough, occasionally moderate in
southeast. Wintry showers. Good, occasionally poor.

___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] cheap traffic measure for a small set of zones

2021-03-26 Thread Dobbins, Roland 



> On Mar 26, 2021, at 8:12 PM, Frank Louwers  wrote:
> 
> This message originated outside of NETSCOUT. Do not click links or open 
> attachments unless you recognize the sender and know the content is safe.
> 
> As an alternative, you might look at dnsdist

dnsdist is a great tool, but it might be a bit much just to count stats for a 
few minutes.  ;>


--
Roland Dobbins 


___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] cheap traffic measure for a small set of zones

2021-03-26 Thread Shannon Weyrick via dns-operations 
--- Begin Message ---
Hi, you can also check out pktvisor https://github.com/ns1/pktvisor ... it
has both a command line UI and the ability to collect to a time series
database like Prometheus or Elastic (an imminent release will make the
former very simple). Works via packet capture right now but dnstap support
is coming. In addition it can also summarize pcap files.

Shannon


On Fri, Mar 26, 2021 at 12:22 AM Randy Bush  wrote:

> > is there a simple tool to run on a server to measure query and data
> > rates for a small set of zones?
> >
> > 
>
> bingo!  thanks.
>
> randy
> ___
> dns-operations mailing list
> dns-operations@lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>
--- End Message ---
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] cheap traffic measure for a small set of zones

2021-03-26 Thread Frank Louwers 
As an alternative, you might look at dnsdist: a simple (but powerful) open 
source dns proxy which could pass all queries to your bind setup, but provide 
you with the metrics you need.

https://dnsdist.org

Frank



> On 26 Mar 2021, at 07:44, Antonio Prado via dns-operations 
>  wrote:
> 
> 
> From: Antonio Prado 
> Subject: Re: [dns-operations] cheap traffic measure for a small set of zones
> Date: 26 March 2021 at 07:44:39 CET
> To: Randy Bush 
> Cc: DNS Operations 
> 
> 
> On 3/26/21 5:20 AM, Randy Bush wrote:
>>> is there a simple tool to run on a server to measure query and data
>>> rates for a small set of zones?
>>> 
>>> <https://github.com/measurement-factory/dnstop>
>> bingo!  thanks.
> 
> hi,
> 
> dnstop does not support TCP at this time
> 
> --
> antonio
> 
> 
> ___
> dns-operations mailing list
> dns-operations@lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations

___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] cheap traffic measure for a small set of zones

2021-03-26 Thread Antonio Prado via dns-operations 
--- Begin Message ---

On 3/26/21 5:20 AM, Randy Bush wrote:

is there a simple tool to run on a server to measure query and data
rates for a small set of zones?




bingo!  thanks.


hi,

dnstop does not support TCP at this time

--
antonio
--- End Message ---
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] cheap traffic measure for a small set of zones

2021-03-25 Thread Randy Bush 
> is there a simple tool to run on a server to measure query and data
> rates for a small set of zones?
> 
> 

bingo!  thanks.

randy
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] cheap traffic measure for a small set of zones

2021-03-25 Thread Dobbins, Roland 

On Mar 26, 2021, at 10:23, Randy Bush  wrote:

is there a simple tool to run on a server to measure query and data rates for a 
small set of zones?

Maybe dsc, or dnstop?

< https://github.com/DNS-OARC/dsc>





dsc requires more setup.




Roland Dobbins 
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

[dns-operations] cheap traffic measure for a small set of zones

2021-03-25 Thread Randy Bush 
is there a simple tool to run on a server to measure query and data
rates for a small set of zones?  i just want to run it for a day.

it is a a bind9 server which serves a few hundred zones.  i would like
to know the query rate and byte count for six of them.

randy

---
ra...@psg.com
`gpg --locate-external-keys --auto-key-locate wkd ra...@psg.com`
signatures are back, thanks to dmarc header butchery
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations