TIL about dnstop, a top-like display of DNS query and response traffic (Linux only, I believe, but probably available packaged for your distro). This is going to be useful for us in the future.