{"id":1939,"date":"2018-06-23T00:01:07","date_gmt":"2018-06-22T22:01:07","guid":{"rendered":"https:\/\/stls.eu\/blog\/?p=1939"},"modified":"2018-06-23T00:01:07","modified_gmt":"2018-06-22T22:01:07","slug":"lede-openwrt-sniff-dns-traffic","status":"publish","type":"post","link":"https:\/\/stls.eu\/blog\/2018\/06\/23\/lede-openwrt-sniff-dns-traffic\/","title":{"rendered":"LEDE \/ OpenWRT sniff DNS traffic"},"content":{"rendered":"

log into router via ssh<\/p>\n

opkg update\r\nopkg install tcpdump\r\ntcpdump -i eth1 -l -vvv dst port 53<\/pre>\n
save dump<\/p>\n
tcpdump -i eth1 -l -vvv dst port 53 >> \/tmp\/dns.dump\r\ngrep -E 'A\\?' \/tmp\/dns.dump  |sed -e 's\/^.*A? \/\/' -e 's\/ .*\/\/'|sort -u<\/pre>\n
live dns view<\/p>\n
tcpdump -lvi any \"udp port 53\" 2>\/dev\/null | grep -E 'A\\?' | awk '{print $(NF-1)}'<\/pre>\n","protected":false},"excerpt":{"rendered":"
log into router via ssh opkg update opkg install tcpdump tcpdump -i eth1 -l -vvv dst port 53 save dump tcpdump -i eth1 -l -vvv dst port 53 >> \/tmp\/dns.dump grep -E ‘A\\?’ \/tmp\/dns.dump |sed -e ‘s\/^.*A? \/\/’ -e ‘s\/ … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[75,56],"tags":[],"class_list":["post-1939","post","type-post","status-publish","format-standard","hentry","category-openwrt","category-tcpdump"],"_links":{"self":[{"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/posts\/1939","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/comments?post=1939"}],"version-history":[{"count":3,"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/posts\/1939\/revisions"}],"predecessor-version":[{"id":1942,"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/posts\/1939\/revisions\/1942"}],"wp:attachment":[{"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/media?parent=1939"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/categories?post=1939"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/stls.eu\/blog\/wp-json\/wp\/v2\/tags?post=1939"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}