Diagnosing DNS Failures with dig and tcpdump

"It's always DNS" is a running joke for a reason. But "DNS is broken" covers a lot of very different problems: a name that doesn't exist, a server that's down, a firewall in the way, or a client askin