Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge remote-tracking branch 'origin/topic/awelzel/dns-naming-authority-pointer'

Browse source 
* origin/topic/awelzel/dns-naming-authority-pointer:
  DNS: Implement NAPTR RR support
  DNS: Move extract_char_string() helper around
This commit is contained in:
Arne Welzel 2025-06-24 17:44:06 +02:00
commit fbeb3adfe6
13 changed files with 157 additions and 25 deletions
Download patch file Download diff file Expand all files Collapse all files

11
testing/btest/scripts/base/protocols/dns/naptr.zeek Normal file
View file

@ -0,0 +1,11 @@
# @TEST-EXEC: zeek -b -r $TRACES/dns/naptr.pcap %INPUT >out
# @TEST-EXEC: btest-diff out
# @TEST-EXEC: zeek-cut -m uid query qclass_name qtype_name answers < dns.log > dns.log.cut
# @TEST-EXEC: btest-diff dns.log.cut
@load base/protocols/dns
event dns_NAPTR_reply(c: connection, msg: dns_msg, ans: dns_answer, naptr: dns_naptr_rr)
{
print "NAPTR", msg, ans, naptr;
}