Package: dnsdiag
Version: 1.4.0-1
Severity: normal
Dear Maintainer,
According to the detailed description of the package -
"Dnstraceroute can be used to trace the path a DNS request takes to
destination. Its purpose is to detect whether a request is redirected
or hijacked. This can be done by comparing different DNS queries being
sent to the same DNS server using dnstraceroute and observe if there
is any difference between the path."
If I understand it, it offers functionality similar to what traceroute
follows with the differential that it is able to figure out whether or
not some hijacking/some sort of MITM attack is taking place or not.
Now from the description it offers as well as the way the package is -
[$] dpkg -L dnsdiag | grep dnstraceroute
/usr/bin/dnstraceroute
/usr/share/man/man1/dnstraceroute.1.gz
it seems it is a normal app. But running it exposes -
└─[$] dnstraceroute debian.org
[1:46:36]
dnstraceroute DNS: 192.168.1.1:53, hostname: debian.org, rdatatype: A
Error: Unable to create ICMP socket with unprivileged user. Please run as root.
I am unable to understand why it needs to run as root when traceroute
is able to run with root's privileges.
And if it needs root's privileges, then it should be in /usr/sbin/ and
not /usr/bin PATH.
In either case, please fix. Let me know if any more info. is needed.
-- System Information:
Debian Release: 9.0
APT prefers testing
APT policy: (600, 'testing'), (500, 'unstable-debug'), (500,
'testing-debug'), (1, 'experimental-debug'), (1, 'experimental'), (1,
'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.9.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages dnsdiag depends on:
ii python3-cymruwhois 1.6-2
ii python3-dnspython 1.15.0-1
pn python3:any <none>
dnsdiag recommends no packages.
dnsdiag suggests no packages.
-- no debconf information
--
Regards,
Shirish Agarwal शिरीष अग्रवाल
My quotes in this email licensed under CC 3.0
http://creativecommons.org/licenses/by-nc/3.0/
http://flossexperiences.wordpress.com
EB80 462B 08E1 A0DE A73A 2C2F 9F3D C7A4 E1C4 D2D8
