My slightly tweaked version of dnssnarf, by @linuxgeek247 : http://is.gd/1jsEC Timestamps, more record data, and both queries and responses