DNS Doberman
DNS Doberman is a tool for monitoring key sites against DNS resolution attacks like cache poisoning, DNS tampering and other attacks either locally or upstream. The tool is configured with a list of host names and IP addresses. It then periodically resolves the host names and alerts you if your receive an untrusted IP address response from the DNS server. This could be due to DNS attacks, cache poisoning or other resolution tampering. A variety of alerting mechanisms are supported, including visual logging, email alerting, syslog/event log alerting. When configured properly, the DNS Doberman can integrate easily into network monitoring tools, SIM/SEIM products and other network management packages or offerings.
