DSC NEWS

TCP Support

The DSC collector now parses TCP packets (2007-05-16).

The collector now parses DNS messages delivered via TCP. It handles multi-segment and out-of-order packets. Messages that arrive in multiple TCP segments are parsed after all segments have arrived.

TCP connections that span DSC's 60 second counting interval are not currently processed.

There is a new transport indexer, which you could use to compare the number of DNS messages received via UDP and TCP. This indexer is applied to DNS messages only.

IPv6 Support

The DSC collector now parses IPv6 packets (2007-04-04).

If you experience compile-time errors because of IPv6 code, it can be disabled by setting USE_IPV6=0 in collector/dsc/Makefile.

There is a new ip_version indexer, which you could use to compare the relative amounts of IPv4 and IPv6 traffic received. Note, however, that the ip_version indexer applies to IP packets, rather than DNS messages. This means that it will count non-DNS packets (unless you use a bpf_filter to restrict the type of packets that DSC receives via libpcap).