scan for dns and ntp

zmap -p 123 -M udp --probe-args=file:ntp_123_monlist.pkt -o monlist_fingerprint.txt
./ntpchecker monlist_fingerprint.txt step1.txt 1 0 1
awk '$2>419{print $1}' step1.txt | sort -n | uniq | sort -R > ntpamp.txt

zmap -M udp -p 53 --probe-args=file:1x1.cz.pkt
perl DNSfilter.pl dnslistoutput.txt 3000 1x1.cz
perl buildpacket.pl domain.com