Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

DNS now raises DPD events.

Browse source 
Closes #577.
This commit is contained in:
Robin Sommer 2011-10-06 17:53:03 -07:00
parent b790856a40
commit 6fe2b2c0f3
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/DNS.cc
View file

@ -44,6 +44,7 @@ int DNS_Interpreter::ParseMessage(const u_char* data, int len, int is_query)
// This should weed out most of it. // This should weed out most of it.
if ( dns_max_queries > 0 && msg.qdcount > dns_max_queries ) if ( dns_max_queries > 0 && msg.qdcount > dns_max_queries )
{ {
analyzer->ProtocolViolation("DNS_Conn_count_too_large");
analyzer->Weird("DNS_Conn_count_too_large"); analyzer->Weird("DNS_Conn_count_too_large");
EndMessage(&msg); EndMessage(&msg);
return 0; return 0;
@ -67,6 +68,8 @@ int DNS_Interpreter::ParseMessage(const u_char* data, int len, int is_query)
return 0; return 0;
} }
analyzer->ProtocolConfirmation();
AddrVal server(analyzer->Conn()->RespAddr()); AddrVal server(analyzer->Conn()->RespAddr());
int skip_auth = dns_skip_all_auth; int skip_auth = dns_skip_all_auth;