FEATURE 04 ยท DNS & CONNECTION STREAM

See every byte leave your box.

Interpose outbound DNS queries and active network sockets locally, correlating traffic surges directly to the software PIDs that initiated them.

Outbound Network Telemetry Pipeline

In an era dominated by cloud services, modern software is constantly communicating. Silent telemetry logs, diagnostic reports, and analytics datasets flow outward from your desktop. Noyare restores full visual control over your computer's internet traffic.

1 Application binary requests DNS resolution (e.g. telemetry.ms.com)
2 Noyare's passive raw sockets loop captures query from network interface
3 Engine resolves domain, correlates owner PID [17672] and logs details

This correlation enables developers to identify and block spyware or heavy tracking scripts immediately, without complex command line filters.

INTERACTIVE TEST CONSOLE

โšก How the Network Sniffer Works

Under the hood, Noyare leverages standard operating system socket interfaces to query connections asynchronously. For the DNS sniffer, the Rust backend opens a passive packet capture thread:

  • Passive Socket Sniffing: Spawns a dedicated Rust worker thread that reads from standard system sockets, avoiding heavy dependencies like NPcap or raw device drivers.
  • Process Correlation: Uses native Windows APIs like GetExtendedTcpTable and GetExtendedUdpTable in iphlpapi.dll to map active port flows directly to their owning PID at runtime.
  • Zero Telemetry Overhead: The sniffer functions purely in-memory. Collected connection details are flushed on closure and never stored in files or shared off your machine.