SYN to DNS Analyser

Import a .pcapng capture file to find TCP SYN packet destinations that match DNS A record answers — revealing which domains your connections resolve to.

Wireshark Capture Filter

Use this capture/display filter in Wireshark to record only the packets this analyser needs — TCP SYN packets and DNS traffic on port 53.

tcp[tcpflags] & (tcp-syn|tcp-ack) == tcp-syn or port 53

Flush DNS Cache

Clear your local DNS resolver cache before capturing, so fresh lookups are recorded in the trace.

Windows

ipconfig.exe /flushdns

Linux

sudo resolvectl flush-caches

Import .pcapng capture file

Drag & drop or click to browse