DNStop is a real good tool for what it does. It's an exceptionally useful tool and probably at the top of my list for deciphering DoS attacks targetting or amplifying against DNS resolvers. But for RTT and timeouts, errr not so good. Sorry for the top post. Stupid Blackberry... Regards, Stefan Fouant www.shortestpathfirst.com ------Original Message------ From: jul To: Joseph Jackson To: nanog@nanog.org Subject: Re: DNS query analyzer Sent: Dec 2, 2009 12:47 AM Joseph Jackson wrote on 01/12/09 01:06:

Anyone know of a tool that can take a pcap file from wireshark that was used to collect dns queries and then spit out statistics about the queries such as RTT and timeouts?

You also have DNSTop http://dns.measurement-factory.com/tools/dnstop/ Best regards, Julien Sent from my Verizon Wireless BlackBerry