github/weave-scope
1
0
Fork 0
mirror of https://github.com/weaveworks/scope.git synced 2026-03-04 18:51:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add support for snooping DNS over TCP

Browse Source
This commit is contained in:
Alfonso Acosta
2016-09-23 12:41:32 +00:00
parent c64dfa6f55
commit 6f95d05c59
1 changed files with 18 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
probe/endpoint/dns_snooper_linux_amd64.go
View File

@@ -111,12 +111,29 @@ func (s *DNSSnooper) Stop() {
}
}
// Gopacket doesn't provide direct support for DNS over TCP, see https://github.com/google/gopacket/issues/236
type tcpWithDNSSupport struct {
tcp layers.TCP
}
func (m *tcpWithDNSSupport) DecodeFromBytes(data []byte, df gopacket.DecodeFeedback) error {
return m.tcp.DecodeFromBytes(data, df)
}
func (m *tcpWithDNSSupport) CanDecode() gopacket.LayerClass { return m.tcp.CanDecode() }
func (m *tcpWithDNSSupport) NextLayerType() gopacket.LayerType {
if m.tcp.SrcPort == 53 || m.tcp.DstPort == 53 {
return layers.LayerTypeDNS
}
return m.tcp.NextLayerType()
}
func (m *tcpWithDNSSupport) LayerPayload() []byte { return m.tcp.LayerPayload() }
func (s *DNSSnooper) run() {
var (
decodedLayers []gopacket.LayerType
dns layers.DNS
udp layers.UDP
tcp layers.TCP
tcp tcpWithDNSSupport
ip4 layers.IPv4
ip6 layers.IPv6
eth layers.Ethernet