How to interpret this tool
Explore domains, query types, responses, and DNS patterns from a PCAP. A visual anomaly is a reason to inspect context, not proof by itself. Preserve the original file, record its source, and compare multiple indicators before drawing a conclusion.