dnstop is a libpcap application (like tcpdump) that displays various tables of DNS traffic on your network. Currently dnstop displays tables of: Source IP addresses Destination IP addresses Query types Response codes Opcodes Top level domains Second level domains Third level domains etc... dnstop supports both IPv4 and IPv6 addresses. To help find especially undesirable DNS queries, dnstop provide