dnstop is a tool for monitoring dns requests on a particular network. It is a libcap snooper, so all the snoop rules apply.Get it here: http://dnstop.measurement-factory.com
This is a collection of techical information, much of it learned the hard way. Consider it a lab book or a /info directory. I doubt much of it will be of use to anyone else.