DnsTrace

Monitor DNS queries by host processes using eBPF!

DnsTrace requires BCC (BPF Compiler Collection) to be installed on your system. Follow the BCC installation guide for your Linux distribution.

Install DnsTrace using pipx:

pipx install dnstrace

Run DnsTrace with root privileges:

sudo dnstrace

sudo dnstrace [OPTIONS]

Options:
  -t, --tail     Stream live DNS queries (tail mode)
  -d, --domain   Show DNS query domains
  -h, --help     Show help message

Basic monitoring:

sudo dnstrace

Stream live queries:

sudo dnstrace --tail

Show domains with live-streaming:

sudo dnstrace --tail --domain

• Real-time statistics dashboard
• Query type distribution charts
• Process attribution and interface details
• Responsive column layout

• Live-streaming of DNS queries
• Optional domain display with --domain flag