DNSViz vs NetStat Agent

DNSViz is a free, open-source tool for visualizing DNS zone status and investigating DNSSEC deployment. It lays out a domain's authentication chain and resolution path, and identifies configuration errors. The graph can show delegations, record sets, negative responses, DNSKEY and DS records, signatures, wildcards, warnings and errors. It classifies DNS data as secure, bogus or insecure according to whether a trust chain reaches an anchor. The web service can run new analyses, but its maintenance mode means historical analyses cannot be loaded and new results cannot be saved to its database. For command-line use, the suite includes tools to query DNS, assess results and produce graph or text output. Queries use recursive resolvers by default, or authoritative servers when requested; graph output can be an image, DOT graph or HTML file. DNSViz documents installation on Linux, macOS and FreeBSD, among other Python-supported environments, and provides a Docker container. It is intended for understanding and troubleshooting DNSSEC, including pre-deployment checks of proposed zone and delegation changes.

NetStat Agent has no write-up on Specifiction yet; its figures are above.