Re: DNS query analyzer

2009-12-01 Thread Stefan Fouant
gards, Stefan Fouant www.shortestpathfirst.com --Original Message-- From: jul To: Joseph Jackson To: nanog@nanog.org Subject: Re: DNS query analyzer Sent: Dec 2, 2009 12:47 AM Joseph Jackson wrote on 01/12/09 01:06: > Anyone know of a tool that can take a pcap file from wireshark that was us

Re: DNS query analyzer

2009-12-01 Thread jul
Joseph Jackson wrote on 01/12/09 01:06: Anyone know of a tool that can take a pcap file from wireshark that was used to collect dns queries and then spit out statistics about the queries such as RTT and timeouts? You also have DNSTop http://dns.measurement-factory.com/tools/dnstop/ Best reg

Re: DNS query analyzer

2009-12-01 Thread Aaron Glenn
On Tue, Dec 1, 2009 at 3:58 PM, Tony Finch wrote: > On Mon, 30 Nov 2009, Joseph Jackson wrote: >> >> Anyone know of a tool that can take a pcap file from wireshark that was >> used to collect dns queries and then spit out statistics about the >> queries such as RTT and timeouts? > > I don't know i

Re: DNS query analyzer

2009-12-01 Thread Tony Finch
On Mon, 30 Nov 2009, Joseph Jackson wrote: > > Anyone know of a tool that can take a pcap file from wireshark that was > used to collect dns queries and then spit out statistics about the > queries such as RTT and timeouts? I don't know if it'll do exactly what you want, but have a look at https:/

Re: DNS query analyzer

2009-12-01 Thread Phil Regnauld
Joseph Jackson (jjackson) writes: > Hey List! > > Anyone know of a tool that can take a pcap file from wireshark that was used > to collect dns queries and then spit out statistics about the queries such as > RTT and timeouts? I don't know if DSC does this, but check it out: ht

Re: DNS query analyzer

2009-11-30 Thread Jon Meek
I have a "DNSaudit" program that takes libpcap (wireshark/tcpdump) files. Originally its purpose was to identify AnswersWithoutQuestions, and QuestionsWithoutAnswers when we were having some routing issues causing answers to return via a different ISP. Later I added statistics for response time by

Re: DNS query analyzer

2009-11-30 Thread John Kristoff
On Mon, 30 Nov 2009 16:06:45 -0800 Joseph Jackson wrote: > Anyone know of a tool that can take a pcap file from wireshark that > was used to collect dns queries and then spit out statistics about > the queries such as RTT and timeouts? Nothing with RTT and timeouts in this, but it could probably

Re: DNS query analyzer

2009-11-30 Thread Jay Hennigan
Stefan Fouant wrote: -Original Message- From: Raymond Dijkxhoorn [mailto:raym...@prolocation.net] I don't think it's being actively maintained at the moment but you should be able to find it on the NLnet Labs site - http://www.nlnetlabs.nl/projects/dns-analyzer/ I very recently asked

RE: DNS query analyzer

2009-11-30 Thread Stefan Fouant
> -Original Message- > From: Raymond Dijkxhoorn [mailto:raym...@prolocation.net] > Sent: Monday, November 30, 2009 9:54 PM > > > I don't think it's being actively maintained at the moment but you > should be > > able to find it on the NLnet Labs site - > > http://www.nlnetlabs.nl/projects/

RE: DNS query analyzer

2009-11-30 Thread Raymond Dijkxhoorn
Hi! Anyone know of a tool that can take a pcap file from wireshark that was used to collect dns queries and then spit out statistics about the queries such as RTT and timeouts? It just so happens there is a tool aptly named DNS Analyzer by NLnet Labs. I used it a while back but if I recall yo

RE: DNS query analyzer

2009-11-30 Thread Stefan Fouant
> -Original Message- > From: Joseph Jackson [mailto:jjack...@aninetworks.net] > Sent: Monday, November 30, 2009 7:07 PM > > Anyone know of a tool that can take a pcap file from wireshark that was > used to collect dns queries and then spit out statistics about the > queries such as RTT and

Re: DNS query analyzer

2009-11-30 Thread Nathan Ward
On 1/12/2009, at 1:06 PM, Joseph Jackson wrote: Hey List! Anyone know of a tool that can take a pcap file from wireshark that was used to collect dns queries and then spit out statistics about the queries such as RTT and timeouts? Not off the top of my head, but, you could use wireshark'