[Forensics] Marshal in the Middle

I’m stuck on it, got the DNS tunnel thing - But how to extract with what tools, not sure what the next step is here.

Anyone?