[dns-operations] Fingerprinting stub resolvers

[Matthew Pounsett]

A friend of mine at an ISP asked me recently whether I had any suggestions for fingerprinting stub resolvers.  They've got pcaps from the downstream side of their caching servers and are looking at trying to pull more interesting statistics than query counts out of them.  I didn't have any good suggestions, but it seems like an interesting question to ask of one's name server.   Has anyone else tackled this before?  Do tools exist?