dnsreplay
dnsscope
dnsscan INFILE…
dnsscan takes one or more INFILEs in PCAP format and generates a list of the number of queries per qtype.
None
pcap(3PCAP), tcpdump(8)