zaro

How to check browsing history in Command prompt?

Published in Network History 3 mins read

While the Command Prompt cannot directly display the full browsing history stored by web browsers (like Chrome, Firefox, Edge, etc.), you can use it to view your DNS cache history. This cache contains a record of recently visited website domain names that your computer has looked up.

Checking the DNS cache can give you an idea of the websites or domains your computer has connected to, which is part of your overall internet activity history.

Using ipconfig /displaydns to View DNS Cache

The primary command used in Command Prompt to see this information is ipconfig /displaydns. This command displays the contents of the DNS client resolver cache, showing domain names and their corresponding IP addresses that your system has recently queried and stored locally for faster access.

Steps to View DNS Cache History

Based on the provided reference, here's how to access this information:

  1. Open Command Prompt as Administrator:
    • Type cmd in the Start menu search bar.
    • Locate "Command Prompt" in the results.
    • Right-click on "Command Prompt" and select "Run as administrator". You may need to confirm this action if prompted by User Account Control.
    • Reference Step 1: Type cmd in the Start menu search bar to open Command Prompt. Then click Run as administrator.
  2. Execute the Display DNS Cache Command:
    • In the Command Prompt window that opens, type the following command exactly as shown:
      ipconfig /displaydns
    • Press the Enter key on your keyboard.
    • Reference Step 2: Enter the command ipconfig/displaydns and hit Enter. You'll see your detailed DNS cache history.

What You Will See

After executing ipconfig /displaydns, the Command Prompt window will display a list of DNS cache entries. Each entry typically includes:

  • Record Name: The domain name (e.g., www.google.com, facebook.com).
  • Record Type: The type of DNS record (e.g., A for IPv4 address, AAAA for IPv6 address).
  • Time To Live (TTL): How much longer the entry will remain in the cache (in seconds).
  • Data Length: The length of the data associated with the record.
  • Section: Where the record is stored (e.g., Answer section).
  • A (Host) Record / AAAA (Host) Record: The corresponding IP address(es) for the domain name.

Here's a simplified representation of what the output might look like for a single entry:

Windows IP Configuration

    dns.google
    ----------------------------------------
    Record Name . . . . . : dns.google
    Record Type . . . . . : 1
    Time To Live . . . . . : 271
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 8.8.8.8

Understanding DNS Cache vs. Full Browsing History

It's crucial to understand that viewing the DNS cache with ipconfig /displaydns is not the same as viewing your browser's complete browsing history.

  • DNS Cache: Shows the domain names your system has recently resolved to IP addresses. It doesn't show the full URLs (like specific pages on a site), the timestamps of when you visited, or details like page titles. It's more of a network-level record of domain lookups.
  • Full Browsing History: Stored within your specific web browser (Chrome, Edge, Firefox, etc.). It includes detailed information like full URLs of every page visited, timestamps of visits, page titles, and potentially other data. This history is accessible through your browser's interface, not Command Prompt.

Therefore, while the DNS cache gives you insight into domain lookups related to your browsing, it's only a partial view of your online activity compared to the history stored within your browser.

Command Summary

Command Description
ipconfig /displaydns Displays the contents of the DNS cache.

This method allows you to check the DNS cache via Command Prompt as described in the reference, providing a glimpse into recent domain lookups.