DNS inspector
Trace can capture and inspect DNS queries and responses when DNS traffic passes through the tunnel.
View DNS traffic
- DNS messages appear in the DNS list when capture is active.
- Use search and filters to isolate domains or record types.
- Each entry shows the queried domain, record type, response data, and timing.
Supported record types
Trace parses all common DNS record types, including:
- Address records: A, AAAA
- Name resolution: CNAME, NS, PTR, SOA
- Mail: MX
- Service discovery: SRV, SVCB, HTTPS
- Text: TXT, CAA
- Security (DNSSEC): DS, DNSKEY, RRSIG, NSEC, NSEC3
- Certificate association: TLSA, SSHFP
Unknown record types are displayed with their raw numeric type code and raw RDATA.
Export DNS data
- Open the DNS list.
- Tap Export.
- Choose CSV or JSON.
Notes
- DNS is usually UDP-based. In proxy-only mode, DNS traffic is not captured.
- Use full-tunnel mode when you need DNS visibility.
- To override DNS resolution for specific domains, see Host Overrides.