[119758] in North American Network Operators' Group
Re: DNS query analyzer
daemon@ATHENA.MIT.EDU (Jon Meek)
Tue Dec 1 00:13:30 2009
In-Reply-To: <695277448C537A469D28FF68D0938C8372F23B5EDB@EXMBX04.exchhosting.com>
Date: Tue, 1 Dec 2009 00:05:38 -0500
From: Jon Meek <meekjt@gmail.com>
To: Joseph Jackson <jjackson@aninetworks.net>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
I have a "DNSaudit" program that takes libpcap (wireshark/tcpdump)
files. Originally its purpose was to identify AnswersWithoutQuestions,
and QuestionsWithoutAnswers when we were having some routing issues
causing answers to return via a different ISP.
Later I added statistics for response time by server.
I suggest trying the other programs mentioned first, I am the only
user of my program...
Jon
On Mon, Nov 30, 2009 at 7:06 PM, Joseph Jackson
<jjackson@aninetworks.net> wrote:
> Hey List!
>
> Anyone know of a tool that can take a pcap file from wireshark that was used to collect dns queries and then spit out statistics about the queries such as RTT and timeouts?
>
>
> Thanks!
>
> Joseph
