Submitted by jelu on Fri, 07/20/2018 - 12:02 With the release of drool version 1.99.2 (and dnsjit v0.9.5) and a tool-chain called respdiff it is now possible to replay a PCAP and do analysis of the responses found in the PCAP with those received from the replay. Check blog post for details. Tags dns