Sign up ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I would like to check a machine's internet browsing history and I would like to do this from the commandline or powershell.

Is there any windows command for this or are there any tools for doing this ?

share|improve this question

3 Answers 3

You can view cached DNS entries from CMD.

Every time you browse to a web page, your PC has to request the IP Address for that web site from your default DNS server, and then caches them locally on your machine for a while to speed up future access to that web site — even in a private browsing session.

You can see these for yourself by opening up a command prompt and typing in ipconfig /displaydns to see the full list of cached DNS entries.

Now, the first thing you’ll notice is that a whole lot of information will appear, to the point that all of it can’t fit in the command prompt. What you can do is take the output of the command and send it to a text file somewhere on your machine.

ipconfig /displaydns > c:\desired location

Now, when you open that file you’ll see information about the websites you've visited directly or indirectly.

To get rid of this, just type the command ipconfig /flushdns and your DNS cache will be cleared.

Angel Luis has written a nice tutorial and script on this topic, I suggest you read it.

share|improve this answer

Perhaps check out Nirsoft's IEHistoryView, as it allows saving the resutls to a text file:

This utility reads all information from the history file on your computer, and displays the list of all URLs that you have visited in the last few days. It also allows you to select one or more URL addresses, and then remove them from the history file or save them into text, HTML or XML file. In addition, you are allowed to view the visited URL list of other user profiles on your computer, and even access the visited URL list on a remote computer, as long as you have permission to access the history folder.

share|improve this answer
There's MozillaHistoryView as well. – Karan Jan 14 '13 at 3:55

In PowerShell, this will display just the DNS names:

ipconfig /displaydns|?{$_ -like "Record Name"}

And this will display the IP and Record Type:

ipconfig /displaydns|?{$_ -like "Record"}

Type 1 is an A record and type 5 is an alias.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.