Introducing DNSWatch, Meta's DNS snooping utility.
This tool is built on top of BPF and Go, and enables analysing DNS usage.
It comes with a very handy top-like interface, which can be used to get a high level overview of dns query activity on the system, and a detailed dig-like view, to be able to deep-dive into said queries.
Also comes with a handy Prometheus exporter, which exposes per process dns usage metrics in the Prometheus format.
Detailed slides will follow, alongside some live demos