There are four components in the dnstap system: the encoding format (dnstap payloads), the transport (byte-stream socket), the sender (top box) and the receiver (bottom box). Source of image:

Monitoring DNS with DSC and DNSTAP

OARC Software Engineer, Jerry Lundström is a regular author on the APNIC Blog. His latest posting on the blog explains DNSTAP — what it is, its architecture and the benefit of using it with OARC’s DSC (DNS Stats Collector) tool.

You may access the blog article here:

<DSC and DNSTAP allow you to monitor all the DNS>