Analysing DNS problems
In the previous recipe, we saw how to identify a normal operation of DNS. In this recipe, we will learn how to discover problematic behavior of DNS, and how to figure out its source.
Getting ready
A DNS problem can result in bad performance while browsing the Internet, slow network while working inside the organization network, or any other performance issues. We will see how to isolate these problems and how to find out whether it is a DNS issue or not.
How to do it...
There are two major types of problems in DNS:
DNS cannot resolve a name
Slow operation of DNS
In both cases, connect your Wireshark to the network in the following order when you suspect an Internet connectivity problem:
First, port mirror the PC of the customer complaining about the problem. In this step, you will see specific problems on the PC.
Then, port mirror your DNS server. In this step, you will be able to find the general problems that are common to the entire organization (or at least to the part...