dns-flood-detector [\|-b\||\|-d\|] [\|-v\|] [\|-h\|] [\|-i device\|] [\|-t n\|] [\|-a n\|] [\|-w n\|] [\|-x n\|] [\|-m n\|]


DNS Flood Detector was developed to detect abusive usage levels on high traffic nameservers and to enable quick response to the use of one's nameserver to facilitate spam.



run in foreground in bindsnap mode


run in background in daemon mode


verbose output - use again for more verbosity


display help

-i device

specify device name to listen on

-t n

alarm at >n queries per second

-a n

reset alarm after n seconds

-w n

calculate stats every n seconds

-x n

create n buckets

-m n

report overall stats every n seconds

RELATED TO dns-flood-detector…

Website <>


DNS-FLOOD-DETECTOR was written by Dennis Opacki <[email protected]>.

This manual page was written by Jan Wagner <[email protected]>, for the Debian project (but may be used by others).