---
name: "dnswasher"
section: "1"
platform: "linux"
package: "powerdns"
version: "5.1.5-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/dnswasher"
---

# dnswasher(1)

A PowerDNS nameserver debugging tool

## NAME

dnswasher - A PowerDNS nameserver debugging tool

## SYNOPSIS

**dnswasher** \[*OPTION*\]... *INFILE* \[*INFILE*\] *OUTFILE*

## DESCRIPTION

**dnswasher** takes one or more *INFILE*s in PCAP format and writes out *OUTFILE* also in PCAP format, while obfuscating end-user IP addresses.

This is useful to share data with third parties while attempting to protect the privacy of your users.

The INFILEs must be of identical PCAP type.

Please check the output of **dnswasher** to make sure no customer IP addresses remain. Also realize that sufficient data could allow individuals to be re-identified based on the domain names they care about.

## OPTIONS

- **--decrypt, -d**

  Undo IPCipher encryption of IP addresses.

- **--help, -h**

  Show summary of options.

- **--key, -k**

  Base64 encoded 128-bit key for IPCipher.

- **--passphrase, -p**

  Passphrase that will be used to derive an IPCipher key.

- **--version, -v**

  Output version.

## SEE ALSO

pcap(3PCAP), [tcpdump(8)](/tcpdump/8.md)

## AUTHOR

PowerDNS.COM BV

## COPYRIGHT

PowerDNS.COM BV