Skip to content

dotse/dnssec-analysis

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

71 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

This is a number of tools to collect DNS data for DNSSEC analysis.

cleanzone.pl   cleans a (signed) zone and extracts all domains (lnames) with DS records  
collect.pl     collects all DNSSEC related data for later analysis (outputs JSON)  
analyze.pl     for analysis of the JSON files with DNS info  
queue.sh       for running burnds.pl with many threads  

----

Example usage, batch for a lot of domains:

# create a list from a signed zone file
cleanzone.pl -f zonefile > domainlist.txt
# run 
queue.sh domainlist.txt
# do some analysis
analyze.pl -d directory --rcode     # analyze return codes
analyze.pl -d directory --servfail  # toplist of name servers with SERVFAIL

Or just get data from a domain:

collect.pl --pretty -n iis.se

About

tools for analyzing dnssec

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Perl 93.9%
  • Shell 6.1%