NetFlows - Network Flow Extractor with DNS Resolution

You are helping the user extract and analyze network flows from packet capture files using the netflows tool.

Tool Overview

NetFlows analyzes pcap/pcapng files to:

• Extract unique TCP and UDP flows (destination IP:port pairs)
• Build a DNS resolution table from DNS responses in the capture
• Automatically resolve IP addresses to hostnames where possible
• Filter flows by source IP address
• Generate a summary of all network destinations contacted

This is particularly useful for IoT device analysis to understand what external services a device communicates with.

Instructions

When the user asks to analyze network flows, extract destinations, or identify what hosts a device talks to: