DNS capture and analysis