DnsRecorder receives DNS answers observed on decrypted inbound packets. It is passive: TrackerControl uses this mapping later when deciding on app connections, but the DNS response is not blocked or rewritten here.
source not stored for this graph (policy: none)
no outgoing calls
no test coverage detected