Windows 10: Log all DNS activity on your Windows PCs with DNSLookupView

DNSLookupView is a new portable application by Nirsoft, which logs all DNS activity on Windows devices. DNS is a cornerstone of the Internet, as it translates domain names such as ghacks.net into IP addresses. Communication on the Internet needs DNS, and DNS may reveal a lot about a user's activity on the Internet.

While DNS does not reveal the actual pages a user visits, it does reveal the domain names that are accessed on a device. Recently, several initiatives have been started to make DNS more secure by encrypting the communication. DNS over HTTPS is probably the most popular option right now, as it is implemented in several web browsers (see Firefox and Chrome) and Microsoft's Windows 10 operating system. Alternatives, such as DNS Crypt exist as well.

DNS communication happens in plain text by default, and that leaves the door wide open for network snooping and other forms of spying on user communcations.

DNSLookupView




DNSLookupView is a portable program for Microsoft Windows devices. It is compatible with Windows 8.1 and up, and can be downloaded free of charge from the Nirsoft website. Just extract the archive it is supplied as after the download finishes and run the program to use it.

Nir Sofer describes how the program works on the official webpage.

This tool uses the event tracing of Windows operating system with the 'Microsoft-Windows-DNS-Client' provider ( 1C95126E-7EEA-49A9-A3FE-A378B03DDB4D ). The captured event ID is 3008, which contains the information about every DNS query handled by the DNS Client service of Windows.
​

Activate the play button in the program's toolbar to start the recording. DNS queries are added to the program interface as they happen from that moment on. For each query, information such as the host name, query type and result, process or process folder is listed.

Sort the data with a click on a table header, e.g. by process name or host. Select the stop button to stop the logging.



Nirsoft applications come with export functionality; select the HTML report options under the View menu, or use File > Save Selected Items to save a selection (or all) to various formats including txt or csv.

You may also run the program from the command line to capture and save logs without user interface.

Positive

• DNSLookupView is a free portable program that requires no installation
• The program logs all DNS queries that happen on the system.

Negative

• No filter to display only errors / certain types of queries.

Closing Words


DNSLookupView is a straightforward application, just like many other Nirsoft programs. It is useful if you want to monitor DNS traffic, e.g. to spot programs that communicate with the Internet without your consent, for troubleshooting purposes, or just for getting an overview of the communication.

Now You: which DNS provider do you use?

Thank you for being a Ghacks reader. The post Log all DNS activity on your Windows PCs with DNSLookupView appeared first on gHacks Technology News.

read more...

 

DNS problems with router

A couple suggestions I have for you:

Update the firmware on the router. Maybe it's getting into a badstate, and a firmware update might fix it. Or if you're comfortable with it, install a custom firmware like dd-wrt. Just make sure its supported on your router first.

Change your DNS to: 8.8.8.8, 4.2.2.1. Might help.

If none of these work, maybe statically set your DNS on your PS3/PC to the IPs you listed, taking the router out of the lookup procedure.

Last option, is look for a new router.

 

Windows 10 DNS leak

No, went with a different 3rd party suggestion. Works better. I'm reliant on others for my tech needs that way.

 

DNS server causing problem

Hi Andrea,

DNS is a server that translates websites' addresses so that browsers can connect to them. If the addresses become outdated or the server has issues, problems and DNS errors occur. For us to provide an accurate solution, we would need you to answer the following
questions:

• Which build, version and edition of Windows is installed on your computer?
• What changes have you made to your device before this issue occurred?
• Are you experiencing the same issue regardless if you are trying to be connected to a wired or wireless connection?

For initial troubleshooting, we suggest deleting the DNS cache. This can refresh the DNS files and settings on your PC. Follow these steps to delete the DNS cache:

• Using Search type Command Prompt.
• Form the search results, right click on Command Prompt (Desktop app) and then choose Run as administrator.
• In the Command Prompt window, type ipconfig /flushdns and then hit the Enter key.
• Once done, restart your computer and then check if the same issue persists.

We are looking forward to your response.