dnsspoof(8)

dnsspoof8

Forge replies to dns address / pointer queries

Usage

dnsspoof [-i interface] [-f hostsfile] [expression]

Overview

dnsspoof forges replies to arbitrary DNS address / pointer queries on the LAN. This is useful in bypassing hostname-based access controls, or in implementing a variety of man-in-the-middle attacks.

Options

-i interface

Specify the interface to use.

-f hostsfile

Specify the pathname of a file in hosts(5) format. Only one hostname allowed per line (no aliases), although hostnames may contain wildcards (such as *.doubleclick.net).

expression

Specify a tcpdump(8) filter expression to select traffic to sniff.

If no hostsfile is specified, replies will be forged for all address queries on the LAN with an answer of the local machine's IP address.

Files

/usr/share/dsniff/dnsspoof.hosts

Sample hosts file.

Releases

Unchanged in 12 releases since Debian 3.1 (Sarge).

  1. 3.1–Arch

Author

Dug Song <[email protected]>

From dsniff 2.4b1-34 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.