Home
Softono
DNS-collector

DNS-collector

Open source MIT Go
GitHub
511
Stars
82
Forks
34
Issues
11
Watchers
2 weeks
Last Commit
DNS & Domain Tools System Monitoring

About DNS-collector

Grab your DNS logs, detect anomalies, and finally understand what's happening on your network. The missing piece between DNS servers and your data stack.

Platforms

Web Self-hosted

Languages

Go

Links

Source Code
d
Published by
dmachard
Visit View Profile

README.md

View on GitHub

Go Report Go version Go tests Go coverage Go bench Go Fuzz Go lines

release docker

DNS-collector

What is DNS-collector?

DNS-collector is a lightweight tool that captures DNS queries and responses from your DNS servers, processes them intelligently, and sends clean data to your monitoring or analytics systems.

What it does:

  • Captures DNS data from your DNS servers (BIND, PowerDNS, Unbound, etc.) via DNStap protocol or live network capture
  • Filters out noise like health checks, internal queries, or spam before storage
  • Enriches data with GeoIP, threat intelligence, or custom metadata
  • Outputs clean data to files, databases, SIEM tools, or monitoring dashboards

Why DNS-collector?

The missing piece between DNS servers and your data stack.

  • DNS-native processing: Understands DNS protocol, EDNS, query types natively
  • Process at the edge: Clean, filter and enrich DNS data before storage - not after
  • Multiple input sources: DNStap streams, live network capture, log files
  • DNS-aware transformations: Filtering noise upstream, user privacy
  • Flexible outputs: Files, syslog, databases, monitoring tools and more...
  • Production ready: Used in real networks, tested with major DNS servers
  • Enhanced DNStap: TLS encryption, compression, and more metadata capabilities

🚀 Quick Start

Download the latest release and run with default config: Default setup listens on tcp/6000 for DNStap streams and outputs to stdout. To get started quickly, you can use this default config.yml.

./dnscollector -config config.yml

run

📚 Documentation

Topic Description
📝 Formats Supported output formats (text, JSON, PCAP, Jinja2, etc.)
🔧 Configuration Complete config reference
📤 Workers Input sources and output destinations setup
🔄 Transformers Data enrichment options
🐳 Docker Container deployment
🔍 Examples Ready-to-use configs
🔗 Integrations Integration with popular tools and DNS servers
⭐ Extended DNStap Extended DNSTap
📊 Telemetry REST API and Prometheus metrics
⚡ Performance Tuning guide

👥 Contributions

Contributions are welcome! Check out:

🧰 Related Projects: