Extracts and analyzes network flows from packet capture files with automated DNS hostname resolution.
NetFlows Analyzer is a specialized utility for security researchers and developers to inspect network traffic patterns within pcap and pcapng files. It automatically maps IP addresses to hostnames by correlating DNS traffic within the capture, making it easy to identify external services, cloud endpoints, and telemetry servers. Whether you are profiling an IoT device's behavior, performing network forensics, or auditing privacy, this skill simplifies the process of enumerating destinations and identifying communication patterns without requiring external lookup services.
Key Features
01Supports pcap and pcapng file analysis
02685 GitHub stars
03Correlates DNS responses to resolve IP hostnames automatically
04Generates human-readable, JSON, and minimal quiet outputs
05Filters traffic by specific source IP addresses for device profiling
06Consolidates unique TCP and UDP communication flows into summaries
Use Cases
01Auditing applications for hidden telemetry and tracking endpoints
02Identifying C2 servers or exfiltration destinations during forensics
03Profiling IoT device communication and external cloud endpoints
