[119785] in North American Network Operators' Group
Re: DNS query analyzer
daemon@ATHENA.MIT.EDU (Stefan Fouant)
Wed Dec 2 00:58:08 2009
To: "jul" <jul_bsd@yahoo.fr>, "Joseph Jackson" <jjackson@aninetworks.net>,
nanog@nanog.org
From: "Stefan Fouant" <sfouant@shortestpathfirst.net>
Date: Wed, 2 Dec 2009 05:57:48 +0000
Reply-To: sfouant@shortestpathfirst.net
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
DNStop is a real good tool for what it does. It's an exceptionally useful tool and probably at the top of my list for deciphering DoS attacks targetting or amplifying against DNS resolvers. But for RTT and timeouts, errr not so good.
Sorry for the top post. Stupid Blackberry...
Regards,
Stefan Fouant
www.shortestpathfirst.com
------Original Message------
From: jul
To: Joseph Jackson
To: nanog@nanog.org
Subject: Re: DNS query analyzer
Sent: Dec 2, 2009 12:47 AM
Joseph Jackson wrote on 01/12/09 01:06:
> Anyone know of a tool that can take a pcap file from wireshark that was used to collect dns queries and then spit out statistics about the queries such as RTT and timeouts?
You also have DNSTop
http://dns.measurement-factory.com/tools/dnstop/
Best regards,
Julien
Sent from my Verizon Wireless BlackBerry
