The tool is configured with a list of host names and IP addresses. It then periodically resolves the host names and alerts you if your receive an untrusted IP address response from the DNS server.
This could be due to DNS attacks, cache poisoning or other resolution tampering. A variety of alerting mechanisms are supported, including visual logging, email alerting, syslog/event log alerting.
When configured properly, the DNS Doberman can integrate easily into network monitoring tools, SIM/SEIM products and other network management packages or offerings.
The registered version allows the user to configure an unlimited number of hosts to monitor and checks each of the hosts every 15 minutes. The FREE version only allows 5 hosts and only checks once per hour.