Tool Documentation:

dnstracer Usage Example

Scan a domain (, retry up to 3 times (-r 3), and display verbose output (-v):

root@kali:~# dnstracer -r 3 -v
Tracing to[a] via, maximum of 3 retries ( IP HEADER
- Destination address:

Packages and Binaries:


dnstracer determines where a given Domain Name Server (DNS) gets its information from for a given hostname, and follows the chain of DNS servers back to the authoritative answer.

Installed size: 59 KB
How to install: sudo apt install dnstracer

  • libc6

Trace a chain of DNS servers to the source

root@kali:~# dnstracer -h
dnstracer: invalid option -- 'h'
DNSTRACER version 1.8.1 - (c) Edwin Groothuis -
Usage: dnstracer [options] [host]
	-c: disable local caching, default enabled
	-C: enable negative caching, default disabled
	-o: enable overview of received answers, default disabled
	-q <querytype>: query-type to use for the DNS requests, default A
	-r <retries>: amount of retries for DNS requests, default 3
	-s <server>: use this server for the initial request, default localhost
	             If . is specified, A.ROOT-SERVERS.NET will be used.
	-t <maximum timeout>: Limit time to wait per try
	-v: verbose
	-S <ip address>: use this source address.
	-4: don't query IPv6 servers

Updated on: 2024-Mar-11