Demo data. No capture tables were found in my_pcap. Configure MOTHERDUCK_CONN_TABLE (and friends) or load your Zeek output to investigate a real capture.

Filters

→

DNS

Queries, domains and resolvers in this capture.

DNS activity over time

Queries per time bucket.

Most queried domains

Click a domain to inspect it. Red marks NXDOMAIN failures.

Top DNS clients

Source IPs by query volume.