On Thu, Apr 12, 2007 at 10:26:22AM -0500, Mosemann, Russell <Russell.Mosemann at cune.edu> wrote a message of 9 lines which said: > tcpdump udp and dst <my ip address> and dst port 53 dnstop (http://dnstop.measurement-factory.com/) is more convenient.