Analýza DNS provozu

The subject of this thesis is DNS traffic monitoring in the computer network of University of economics, Prague (VŠE). The main target is to choose and deploy a solution, which can collect DNS packets and provide longer-term DNS statistics. Secondary target is to analyze and compare statistics data obtained from VŠE network and from the same monitoring tool deployed in the network of webhosting services provider mysh.cz. Personal contributions of this thesis are: a comparison of available solutions and selection of the best available one for VŠE network, deployment of this solution and presentation of collected data. It was also necessary to solve all problems that were coming during the deployment process. The first obtained data were also used to identify and fix bad acting servers on both monitored networks. There is explanation of some basic concepts and principles of DNS at the beginning of theses, followed by basic description of both monitored networks. The next chapter belongs to the determination of requirements on the monitoring application, overview of available solutions and selection of the best one available. Other chapter starts with a detailed description of chosen solution and follows with practical procedure of the deployment on the both monitored networks. At the end of the chapter there are illustration outputs and analysis of different outputs from statistical software in the same period on both monitored networks.