NAME

       dnswasher - A PowerDNS nameserver debugging tool

SYNOPSIS

       dnswasher [OPTION]... INFILE [INFILE] OUTFILE

DESCRIPTION

       dnswasher  takes  one  or  more  INFILEs in PCAP format and writes out OUTFILE also in PCAP format, while
       obfuscating end-user IP addresses.

       This is useful to share data with third parties while attempting to protect the privacy of your users.

       The INFILEs must be of identical PCAP type.

       Please check the output of dnswasher to make sure no customer IP  addresses  remain.  Also  realize  that
       sufficient data could allow individuals to be re-identified based on the domain names they care about.

OPTIONS

       --decrypt, -d
              Undo IPCipher encryption of IP addresses.

       --help, -h
              Show summary of options.

       --key, -k
              Base64 encoded 128-bit key for IPCipher.

       --passphrase, -p
              Passphrase that will be used to derive an IPCipher key.

       --version, -v
              Output version.

SEE ALSO

       pcap(3PCAP), tcpdump(8)

AUTHOR

       PowerDNS.COM BV

COPYRIGHT

       PowerDNS.COM BV

                                                  Aug 22, 2025                                      DNSWASHER(1)