DNS query analyzer

[nanog at daork.net (Nathan Ward)]

On 1/12/2009, at 1:06 PM, Joseph Jackson wrote:

> Hey List!
>
> Anyone know of a tool that can take a pcap file from wireshark that  
> was used to collect dns queries and then spit out statistics about  
> the queries such as RTT and timeouts?


Not off the top of my head, but, you could use wireshark's Lua  
extension system to write a plugin to do this for you right within  
wireshark.

The wireshark/Lua stuff is quite powerful (though not super super  
fast), it's a really useful tool to have on hand.

--
Nathan Ward