DNS query analyzer

Stefan Fouant sfouant at shortestpathfirst.net
Mon Nov 30 20:48:53 CST 2009

> -----Original Message-----
> From: Joseph Jackson [mailto:jjackson at aninetworks.net]
> Sent: Monday, November 30, 2009 7:07 PM
> Anyone know of a tool that can take a pcap file from wireshark that was
> used to collect dns queries and then spit out statistics about the
> queries such as RTT and timeouts?

It just so happens there is a tool aptly named DNS Analyzer by NLnet Labs.
I used it a while back but if I recall you could feed it a pcap and it could
spit out all kinds of useful statistical data.

I don't think it's being actively maintained at the moment but you should be
able to find it on the NLnet Labs site -


Stefan Fouant
GPG Key ID: 0xB5E3803D

More information about the NANOG mailing list