Run & Test Configuration
Let’s run our new configuration.
First, we need to run dnstap-receiver with the config file created in the dnstap-receiver Configuration section of this document. Run this command on the Ubuntu VM during the entire time you wish to collect dnstap messages from NIOS.
Open a terminal.
Run dnstap-receiver using the config file as a parameter:
dnstap_receiver -c /etc/dnstap-receiver/dnstap.conf
The console will tell you if there are syntax errors with your config file.
Let’s run a few test queries now. We will use the dig
command to do so.
Open a new terminal or terminal tab without halting the terminal where dnstap-receiver is running.
Run a couple dig commands using the IP address of the NIOS Grid Member running dnstap. Try querying
infoblox.com
. Note: For this demo, the IP used in thedig
is the LAN Interface IP of the IB-FLEX box running DNS Cache Acceleration.
dig @192.168.10.53 infoblox.com
When queries are received by dnstap-receiver, they will appear in the dnstap-receiver stdout.
Open Kibana and observe the queries are ingested into Kibana. For more information on Kibana, indices and creating visualizations, see the Kibana Data Discovery and Kibana Data Visualization sections of this document.
We can also test with a Windows machine to see the ingesting in action instead of sending dig
requests.
Access a Windows machine on the same network as your Grid. Note: For this demo, we will use the same Windows machine used to access the Kibana UI.
Open your Internet and Network settings.
Click Change adapter options.
Right-click on your desired connection and click Properties.
Click on Internet Protocol Version 4 (TCP/IPv4) and click Properties.
Set the Preferred DNS server to the LAN IP address of the NIOS Grid Member running dnstap. Click OK when done. Note: For this demo, the IP used is the LAN Interface IP of the IB-FLEX box running DNS Cache Acceleration.
Open Chrome. Go to http://example.com.
In Kibana, observe the query has been ingested.
The query also appears in the dnstap-receiver stdout.