queries to DNS server

[David Nolan]

--On Friday, September 28, 2007 12:16:38 -0400 John Wobus 
<jw354 at cornell.edu> wrote:

> Another method, that easily gets you a quick sample of your clients is
> using
> tcpdump (or snoop).  Collect X number of packets (e.g. 10,000) and see
> who's
> calling you.


Or you can use dnstop, which does traffic sniffing and analyzes the DNS 
traffic seen by your host.
http://dns.measurement-factory.com/tools/dnstop/

-David