/usr/bin/dnsscope

Syntax: dnsscope filename.pcap [filename2.pcap...]
Allowed options:
  -h [ --help ]               produce help message
  --version                   print version number
  --rd arg                    If set to true, only process RD packets, to false
                              only non-RD, unset: both
  --ipv4 arg (=1)             Process IPv4 packets
  --ipv6 arg (=1)             Process IPv6 packets
  --log-histogram             Write a log-histogram to file 'log-histogram'
  --full-histogram arg        Write a log-histogram to file 'full-histogram'
                              with this millisecond bin size
  -f [ --filter-name ] arg    Do statistics only for queries within this domain
  -l [ --load-stats ] arg     if set, emit per-second load statistics
                              (questions, answers, outstanding)
  --no-servfail-stats         Don't include servfails in response time stats
  --port arg (=0)             The source and destination port to consider.
                              Default is looking at packets from and to ports
                              53 and 5300
  --servfail-tree             Figure out subtrees that generate servfails
  --stats-dir arg (=.)        Directory where statistics will be saved
  -w [ --write-failures ] arg if set, write weird packets to this PCAP file
  -v [ --verbose ]            be verbose