DPP: offline DNS QoE extraction from PCAP

[Konstantin Mikhailov]

Hi all,

I would like to share DPP, an open-source tool for matching DNS queries
with responses in offline PCAP files and exporting per-query records for
QoE analysis:

https://github.com/dnstelecom/dpp

It extracts per-query DNS data for downstream analysis, including client IP
(optionally pseudonymized), queried name, response code, DNS transaction
ID, client source port, and request/response timestamps.

Current scope: offline processing only, DNS over UDP/53, CSV or Parquet
output.

I would especially value feedback on what would make this more useful in
real operator workflows.

Best regards,
Konstantin Mikhailov
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20260329/456fe3dd/attachment.html>