Design And Implementation Of DNS Collecting Software

The DNS system as the portal link for users’access to the network, is a key infrastructure of Internet network. Achieveing real-time monitoring of the network traffic for DNS, obtaining various statistical indicators of DNS system operation and detecting anomalies in DNS network traffic, have great significances to enhance the robustness and security of the DNS system, and ensure network’s high quality and efficient operation.The object of this thesis is design and implementation of DNS collecting software, focusing on three parts. The first part is to introduce the basic DNS protocol and DNS collection system implementation. The second part is the performance of experimental tests for collecting system and discusses optimizations. The third part is the analysis of the output information of DNS collection system in a lab environment and a current network environment, and access to a variety of statistical information on a real environment DNS servers performance and user behavior.DNS Collecting system consists of two parts:PPP and DNSApp. Two parts use a shared memory queue for interprocess communication.We design and implement real-time DNS packet capture, analysis, matching, output, statistics and other functions. When implementing the match of DNS request packets and response packets, we design a hash table structure with two indexes. By analyzing the performance test results, the algorithms and key structures of the hash table are optimized. By analyzing the system output data, we obtain the DNS servers, domain names, users and other dimensions of statistics and exception information. It has a certain value for network traffic monitoring, and providing supports for the safe operation of the DNS system.