How to know what DNS am I using in Ubuntu from 14.04 onwards
Quick Answer
A new NetworkManager tool nmcli
is installed by default now. The command line tool is very powerful but a bit harder to learn. Stick to our question, the short answer is:
nmcli dev show | grep DNS
or, to have cleaner output
nmcli dev show | grep DNS | sed 's/\s\s*/\t/g' | cut -f 2
Explain
If you have time, I can explain the above jumbo-mumble:
nmcli dev show
Works a bit like the old
nm-tool
command. It elaborate the current networking info.You may also learn the setting of a certain interface by adding the interface name. For example, to learn the information of
eth0
, you may usenmcli dev show eth0
.grep DNS
Obviously grep only the lines with the text "DNS" in it.
sed 's/\s\s*/\t/g' | cut -f 2
This is only to clean up the output. The
cut
may select the output by column, but it takes only 1 character as separator (whilenmcli
uses MANY SPACE). Thesed
turns the spaces, in original output, into TAB.
Packet analysis would be an alternative method that works regardless of NetworkManager or other network connection tool that you use. Basic idea is to send a dns query with nslookup
and in a second terminal check where the packets go.
For that we'd need to connect to the network for the first time, so that there is nothing cluttering the connections, and run the following command:
sudo tcpdump -vv -i wlan0 -W 1200 | grep google.com
In alternative terminal run:
nslookup google.com
Once you get packets listing from the tcpdump
, check where do they go from your IP address.
For example,
$ sudo tcpdump -vv -i wlan0 -W 1200 | grep google.com
tcpdump: listening on wlan0, link-type EN10MB (Ethernet), capture size 65535 bytes
eagle.29862 > b.resolvers.Level3.net.domain: [udp sum ok] 64057+ [1au] A? google.com. ar: . OPT UDPsize=4096 (39)
b.resolvers.Level3.net.domain > eagle.29862: [udp sum ok] 64057 q: A? google.com. 11/0/0 google.com. A 173.194.115.64, google.com. A 173.194.115.65, google.com. A 173.194.115.72, google.com. A 173.194.115.66, google.com. A 173.194.115.69, google.com. A 173.194.115.78, google.com. A 173.194.115.70, google.com. A 173.194.115.71, google.com. A 173.194.115.68, google.com. A 173.194.115.67, google.com. A 173.194.115.73 (204)
eagle.16429 > b.resolvers.Level3.net.domain: [udp sum ok] 38822+ A? google.com. (28)
As you can see , my laptop,eagle
, sends packets to my university's dns , b.resolvers.Level3.net.domain
. If you want to see the IP address, you can use the -n
flag with tcpdump
.
For example:
$ sudo tcpdump -n -vv -i wlan0 -W 1200 | grep google.com
tcpdump: listening on wlan0, link-type EN10MB (Ethernet), capture size 65535 bytes
10.10.87.145.56474 > 4.2.2.2.53: [udp sum ok] 15606+ A? google.com. (28)
check your network connections :
ls /etc/NetworkManager/system-connections/
and choose the connection you want to configure.
sudo cat /etc/NetworkManager/system-connections/Internet | grep dns
Replace "Internet" without your connection name
Use can still use nm-tool
:
nm-tool | grep DNS
Install it for U14.04 and later using
sudo apt-get install nm-tool
example:
nm-tool | grep DNS
DNS: 192.168.1.1
DNS: 192.168.10.1
DNS: 192.168.11.1