經過給DNS服務器發送指定的數據包,像PING同樣返回結果緩存
dnsping -c 10 -s 114.114.114.114 www.51cto.com dnsping DNS: 114.114.114.114:53, hostname: www.51cto.com, rdatatype: A 70 bytes from 114.114.114.114: seq=0 time=26.055 ms 70 bytes from 114.114.114.114: seq=1 time=24.745 ms 70 bytes from 114.114.114.114: seq=2 time=24.468 ms 70 bytes from 114.114.114.114: seq=3 time=25.033 ms 70 bytes from 114.114.114.114: seq=4 time=24.615 ms 70 bytes from 114.114.114.114: seq=5 time=24.844 ms 70 bytes from 114.114.114.114: seq=6 time=27.036 ms 70 bytes from 114.114.114.114: seq=7 time=25.232 ms 70 bytes from 114.114.114.114: seq=8 time=25.613 ms 70 bytes from 114.114.114.114: seq=9 time=25.343 ms --- 114.114.114.114 dnsping statistics --- 10 requests transmitted, 10 responses received, 0% lost min=24.468 ms, avg=25.298 ms, max=27.036 ms, stddev=0.777 ms
經過114公共DNS解析51cto官網,解析時間平均爲25ms服務器
測試內部的DNS,由於緩存的關係,會更快ide
dnsping -c 10 -s 192.168.x.x www.51cto.com dnsping DNS: 192.168.x.x:53, hostname: www.51cto.com, rdatatype: A 71 bytes from 192.168.x.x: seq=0 time=84.492 ms 71 bytes from 192.168.x.x: seq=1 time=3.628 ms 71 bytes from 192.168.x.x: seq=2 time=3.340 ms 71 bytes from 192.168.x.x: seq=3 time=3.204 ms 71 bytes from 192.168.x.x: seq=4 time=3.350 ms 71 bytes from 192.168.x.x: seq=5 time=3.198 ms 71 bytes from 192.168.x.x: seq=6 time=3.164 ms 71 bytes from 192.168.x.x: seq=7 time=3.209 ms 71 bytes from 192.168.x.x: seq=8 time=3.059 ms 71 bytes from 192.168.x.x: seq=9 time=3.051 ms --- 192.168.x.x dnsping statistics --- 10 requests transmitted, 10 responses received, 0% lost min=3.051 ms, avg=11.369 ms, max=84.492 ms, stddev=25.693 ms
地址要自豪的隱藏,不過能夠看出除了第一次要去上聯取解析時間較久外,後面由於緩存的關係解析速度是很快的。測試
像traceroute路由探測同樣,用來肯定你的DNS請求通過的路徑到達目的地阿里雲
這裏開啓--expert選項能夠輸出專業提示,例若有可能DNS流暢劫持。很不幸看看個人結果,此次我用了阿里雲的公共DNScode
dnstraceroute --expert -C -t A -s 223.5.5.5 www.51cto.com dnstraceroute DNS: 223.5.5.5:53, hostname: www.51cto.com, rdatatype: A 9 61.51.113.81 (61.51.113.81) 3.487 ms 10 192.168.9.22 (192.168.9.22) 174.075 ms 11 61.49.143.214 (61.49.143.214) 5.115 ms 12 192.168.9.22 (192.168.9.22) 168.890 ms 13 140.205.26.210 (140.205.26.210) 42.070 ms 14 192.168.9.22 (192.168.9.22) 132.504 ms 15 192.168.9.22 (192.168.9.22) 131.364 ms 16 192.168.9.22 (192.168.9.22) 130.170 ms 17 192.168.9.22 (192.168.9.22) 129.046 ms 18 192.168.9.22 (192.168.9.22) 128.409 ms 19 192.168.9.22 (192.168.9.22) 127.440 ms 20 192.168.9.22 (192.168.9.22) 126.075 ms 21 192.168.9.22 (192.168.9.22) 124.876 ms 22 192.168.9.22 (192.168.9.22) 123.502 ms 23 192.168.9.22 (192.168.9.22) 122.405 ms 24 192.168.9.22 (192.168.9.22) 121.296 ms 25 192.168.9.22 (192.168.9.22) 120.340 ms 26 192.168.9.22 (192.168.9.22) 121.284 ms 27 192.168.9.22 (192.168.9.22) 120.235 ms 28 192.168.9.22 (192.168.9.22) 119.002 ms 29 192.168.9.22 (192.168.9.22) 117.941 ms 30 192.168.9.22 (192.168.9.22) 116.735 ms === Expert Hints === [*] public DNS server is next to a private IP address (possible hijacking)
前面8跳我進行了隱藏,後面的,我就很少說了。server
用於同時比較多個DNS服務器的響應時間,很是實用dns
dnseval -t A -f /root/dnsdiag/public-servers.txt -c10 www.51cto.com server avg(ms) min(ms) max(ms) stddev(ms) lost(%) ttl flags ----------------------------------------------------------------------------------------- 114.114.114.114 25.257 24.925 27.023 0.631 %0 38 QR -- -- RD RA -- -- 223.5.5.5 42.854 40.213 56.995 5.080 %0 15 QR -- -- RD RA -- -- 223.6.6.6 43.564 39.979 48.332 2.775 %0 15 QR -- -- RD RA -- -- 123.123.123.124 11.678 6.330 26.417 6.254 %0 60 QR -- -- RD RA -- -- 123.125.81.6 4.015 3.234 6.977 1.121 %0 223 QR -- -- RD RA -- -- 180.76.76.76 10.505 5.159 39.302 10.410 %0 80 QR -- -- RD RA -- --
感謝51CTO,我又拿它作測試了路由
最後附帶官方地址,下載、安裝請自行參考。
官方地址get