Dnstap - Redigeerimiste ajalugu

Imre: /* grafana */

2025-06-18T21:54:30Z

grafana

←Vanem redaktsioon		Redaktsioon: 19. juuni 2025, kell 00:54
181. rida:		181. rida:

	TODO		TODO
		+
		+	Grafana admin kasutaja parooli muutmiseks sobib öelda
		+
		+	<pre>
		+	root@dns-stat:~# docker exec -ti e2 bash
		+	e2557f3fab90:/usr/share/grafana$ grafana-cli admin reset-admin-password uusparool
		+	Deprecation warning: The standalone 'grafana-cli' program is deprecated and will be removed in the future. Please update all uses of 'grafana-cli' to 'grafana cli'
		+	</pre>

	Kasulikud lisamaterjalid		Kasulikud lisamaterjalid

Imre: /* grafana */

2022-06-25T15:40:07Z

grafana

@@ 157. rida: / 157. rida: @@
 ====grafana====
  duser@ns2-nsd-01:~$ docker run --rm -i -t --name=grafana -p 3000:3000 grafana/grafana
 ===Kasulikud lisamaterjalid===

Imre: /* prometheus */

2022-06-25T15:32:21Z

prometheus

←Vanem redaktsioon		Redaktsioon: 25. juuni 2022, kell 18:32
150. rida:		150. rida:
	password: 'parool'		password: 'parool'
	</pre>		</pre>
		+
		+	Tulemusena peab olema prometheus webgui peal näha
		+
		+	* Status -> Targets all sissekanne 'dnscollector' ja State -> Up jne
		+	* Graph -> Expression lahtrist paremal asuva Metrics Explorer nupu abil on näha nimekiri iseloomulikest valikutest (dnscollector_as_stats_top_total jt)

	====grafana====		====grafana====

Imre: /* dns-collector */

2022-06-25T15:28:56Z

dns-collector

@@ 88. rida: / 88. rida: @@
  root@ns2-nsd-01:~# tail -n 1  -f /opt/duser/dnstap-receiver/var-run/dnstap.log
 -06-24 20:30:29.299049 ns2-nsd-01 REPLY 80.235.106.155 INET UDP _dmarc.talechh.ee TXT NOERROR v=DMARC1; p=reject; rua=mailto:dmarc_agg@ee.email; ruf=mailto:dmarc@talechh.ee; fo=0:d;
 ===NSD seadistamine===

Imre: /* prometheus */

2022-06-25T15:25:19Z

prometheus

←Vanem redaktsioon		Redaktsioon: 25. juuni 2022, kell 18:25
131. rida:		131. rida:
	basic_auth:		basic_auth:
	username: 'admin'		username: 'admin'
−	password: '~~changeme~~'	+	password: 'parool'
	</pre>		</pre>

Imre: /* dns-collector */

2022-06-25T15:25:00Z

dns-collector

@@ 45. rida: / 45. rida: @@
         mode: text
         text-format: "localtime identity qr queryip family protocol qname qtype rcode answer"
   routes:

Imre: /* Kasulikud lisamaterjalid */

2022-06-25T14:32:40Z

Kasulikud lisamaterjalid

@@ 87. rida: / 87. rida: @@
         dnstap-log-auth-response-messages: yes
 </pre>
 ===Kasulikud lisamaterjalid===

Imre – 24. juuni 2022, kell 20:36

2022-06-24T20:36:03Z

@@ 1. rida: / 1. rida: @@
 ===Sissejuhatus===
 ===dns-collector===
@@ 67. rida: / 75. rida: @@
  root@ns2-nsd-01:~# tail -n 1  -f /opt/duser/dnstap-receiver/var-run/dnstap.log
 -06-24 20:30:29.299049 ns2-nsd-01 REPLY 80.235.106.155 INET UDP _dmarc.talechh.ee TXT NOERROR v=DMARC1; p=reject; rua=mailto:dmarc_agg@ee.email; ruf=mailto:dmarc@talechh.ee; fo=0:d;
 ===Kasulikud lisamaterjalid===

Imre: Uus lehekülg: '===Sissejuhatus=== ===dns-collector=== dns-collector https://github.com/dmachard/go-dns-collector kasutamiseks sobib öelda duser@ns2-nsd-01:~/dnstap-receiver$ docker run --r...'

2022-06-24T20:32:20Z

Uus lehekülg: '===Sissejuhatus=== ===dns-collector=== dns-collector https://github.com/dmachard/go-dns-collector kasutamiseks sobib öelda duser@ns2-nsd-01:~/dnstap-receiver$ docker run --r...'

Uus lehekülg

===Sissejuhatus===

===dns-collector===

dns-collector https://github.com/dmachard/go-dns-collector kasutamiseks sobib öelda

duser@ns2-nsd-01:~/dnstap-receiver$ docker run --rm -i -t -v /opt/duser/dnstap-receiver/var-run:/var/run -v /opt/duser/dnstap-receiver/dnscollector.conf:/etc/dnscollector/config.yml --name=dnscollector01 dmachard/go-dnscollector

kus

* konteineris töötav .sock mapping - /opt/duser/dnstap-collector/var-run -> /var/run
* konteineris töötav dns collector seadistusfail - /opt/duser/dnstap-collector/dnscollector.conf -> /etc/dnscollector/config.yml

dns collector seadistusfail

<pre>
root@ns2-nsd-01:~# cat /opt/duser/dnstap-receiver/dnscollector.conf
trace:
verbose: true
log-malformed: false
filename: ""
max-size: 10
max-backups: 10

multiplexer:
collectors:
- name: tap_in
dnstap:
sock-path: /var/run/dnstap.sock

loggers:
- name: std_out
logfile:
file-path: "/var/run/dnstap.log"
max-size: 100
max-files: 10
mode: text
text-format: "localtime identity qr queryip family protocol qname qtype rcode answer"

routes:
- from: [ tap_in ]
to: [ std_out ]
</pre>

kus

* TODO

Protesside käivitamise tegevuste järjekord

* kõik protsessid seisavad
* käivitatakse dns collector docker konteiner
* kohendatakse host peal loabitte

root@ns2-nsd-01:~# chmod 0666 /opt/duser/dnstap-receiver/var-run/dnstap.sock

* käivitatakse nsd protsess

root@ns2-nsd-01:~# systemctl start nsd

Tulemusena tekib päringu puhul

$ dig @10.400.0.11 _dmarc.talechh.ee txt

logi

root@ns2-nsd-01:~# tail -n 1 -f /opt/duser/dnstap-receiver/var-run/dnstap.log
2022-06-24 20:30:29.299049 ns2-nsd-01 REPLY 80.235.106.155 INET UDP _dmarc.talechh.ee TXT NOERROR v=DMARC1; p=reject; rua=mailto:dmarc_agg@ee.email; ruf=mailto:dmarc@talechh.ee; fo=0:d;

===Kasulikud lisamaterjalid===

* TODO