Re: DNS query analyzer

["Stefan Fouant" <sfouant () shortestpathfirst net>]

DNStop is a real good tool for what it does.  It's an exceptionally useful tool and probably at the top of my list for 
deciphering DoS attacks targetting or amplifying against DNS resolvers.  But for RTT and timeouts, errr not so good.

Sorry for the top post. Stupid Blackberry...

Regards,

Stefan Fouant
www.shortestpathfirst.com
------Original Message------
From: jul
To: Joseph Jackson
To: nanog () nanog org
Subject: Re: DNS query analyzer
Sent: Dec 2, 2009 12:47 AM

Joseph Jackson wrote on 01/12/09 01:06:
> Anyone know of a tool that can take a pcap file from wireshark that was used to collect dns queries and then spit out 
> statistics about the queries such as RTT and timeouts?

You also have DNSTop

http://dns.measurement-factory.com/tools/dnstop/

Best regards,

        Julien



Sent from my Verizon Wireless BlackBerry