I wanted to know who was using our DNS servers for recursive lookups from off campus. Getting all the data together for this wasn't hard, but once I had it it was difficult to read, so I made a graph of it. Here's how:

First I got all the data into a csv file one datapoint per line and a header line, it looks like:


asn, queries, hosts, name
11888, 0.031, 0.006, Television Internacional S.A. de C.V.
5552, 0.006, 0.006, DIALNET-UK DIALnet PLC


The asns and names are pulled from Cymru, queries is the average number of queries from that netblock per day since we started monitoring, and hosts is the average number of unique IPs querying per day since we started monitoring. Getting the data into this format is left as an exercise for the reader (you probably want to graph something completely different anyway.