> -----Original Message----- > From: Joseph Jackson [mailto:jjack...@aninetworks.net] > Sent: Monday, November 30, 2009 7:07 PM > > Anyone know of a tool that can take a pcap file from wireshark that was > used to collect dns queries and then spit out statistics about the > queries such as RTT and timeouts?
It just so happens there is a tool aptly named DNS Analyzer by NLnet Labs. I used it a while back but if I recall you could feed it a pcap and it could spit out all kinds of useful statistical data. I don't think it's being actively maintained at the moment but you should be able to find it on the NLnet Labs site - http://www.nlnetlabs.nl/projects/dns-analyzer/ HTHs. Stefan Fouant www.shortestpathfirst.net GPG Key ID: 0xB5E3803D