[master] dnstap
4235. [func] Added support in named for "dnstap", a fast method of capturing and logging DNS traffic, and a new command "dnstap-read" to read a dnstap log file. Use "configure --enable-dnstap" to enable this feature (note that this requires libprotobuf-c and libfstrm). See the ARM for configuration details. Thanks to Robert Edmonds of Farsight Security. [RT #40211]
This commit is contained in:
Evan Hunt
@@ -43,6 +43,7 @@ SRCS = db_test.c \
|
||||
dbiterator_test.c \
|
||||
dh_test.c \
|
||||
dispatch_test.c \
|
||||
dnstap_test.c \
|
||||
dnstest.c \
|
||||
geoip_test.c \
|
||||
gost_test.c \
|
||||
@@ -69,6 +70,7 @@ TARGETS = db_test@EXEEXT@ \
|
||||
dbversion_test@EXEEXT@ \
|
||||
dh_test@EXEEXT@ \
|
||||
dispatch_test@EXEEXT@ \
|
||||
dnstap_test@EXEEXT@ \
|
||||
geoip_test@EXEEXT@ \
|
||||
gost_test@EXEEXT@ \
|
||||
keytable_test@EXEEXT@ \
|
||||
@@ -173,6 +175,11 @@ dispatch_test@EXEEXT@: dispatch_test.@O@ dnstest.@O@ ${ISCDEPLIBS} ${DNSDEPLIBS}
|
||||
dispatch_test.@O@ dnstest.@O@ ${DNSLIBS} \
|
||||
${ISCLIBS} ${LIBS}
|
||||
|
||||
dnstap_test@EXEEXT@: dnstap_test.@O@ dnstest.@O@ ${ISCDEPLIBS} ${DNSDEPLIBS}
|
||||
${LIBTOOL_MODE_LINK} ${PURIFY} ${CC} ${CFLAGS} ${LDFLAGS} -o $@ \
|
||||
dnstap_test.@O@ dnstest.@O@ ${DNSLIBS} \
|
||||
${ISCLIBS} ${LIBS}
|
||||
|
||||
rdatasetstats_test@EXEEXT@: rdatasetstats_test.@O@ dnstest.@O@ ${ISCDEPLIBS} ${DNSDEPLIBS}
|
||||
${LIBTOOL_MODE_LINK} ${PURIFY} ${CC} ${CFLAGS} ${LDFLAGS} -o $@ \
|
||||
rdatasetstats_test.@O@ dnstest.@O@ ${DNSLIBS} \
|
||||
|
||||
354
lib/dns/tests/dnstap_test.c
Normal file
354
lib/dns/tests/dnstap_test.c
Normal file
@@ -0,0 +1,354 @@
|
||||
/*
|
||||
* Copyright (C) 2015 Internet Systems Consortium, Inc. ("ISC")
|
||||
*
|
||||
* Permission to use, copy, modify, and/or distribute this software for any
|
||||
* purpose with or without fee is hereby granted, provided that the above
|
||||
* copyright notice and this permission notice appear in all copies.
|
||||
*
|
||||
* THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
|
||||
* REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
||||
* AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
|
||||
* INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
||||
* LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
|
||||
* OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
||||
* PERFORMANCE OF THIS SOFTWARE.
|
||||
*/
|
||||
|
||||
/*! \file */
|
||||
|
||||
#include <config.h>
|
||||
|
||||
#include <atf-c.h>
|
||||
|
||||
#include <unistd.h>
|
||||
#include <stdlib.h>
|
||||
|
||||
#include <isc/buffer.h>
|
||||
#include <isc/file.h>
|
||||
#include <isc/stdio.h>
|
||||
#include <isc/print.h>
|
||||
#include <isc/types.h>
|
||||
|
||||
#include <dns/dnstap.h>
|
||||
#include <dns/view.h>
|
||||
|
||||
#include "dnstest.h"
|
||||
|
||||
#ifdef HAVE_DNSTAP
|
||||
#include <dns/dnstap.pb-c.h>
|
||||
#include <protobuf-c/protobuf-c.h>
|
||||
|
||||
#define TAPFILE "testdata/dnstap/dnstap.file"
|
||||
#define TAPSOCK "testdata/dnstap/dnstap.sock"
|
||||
|
||||
#define TAPSAVED "testdata/dnstap/dnstap.saved"
|
||||
#define TAPTEXT "testdata/dnstap/dnstap.text"
|
||||
|
||||
/*
|
||||
* Helper functions
|
||||
*/
|
||||
static void
|
||||
cleanup() {
|
||||
(void) isc_file_remove(TAPFILE);
|
||||
(void) isc_file_remove(TAPSOCK);
|
||||
}
|
||||
|
||||
/*
|
||||
* Individual unit tests
|
||||
*/
|
||||
|
||||
ATF_TC(create);
|
||||
ATF_TC_HEAD(create, tc) {
|
||||
atf_tc_set_md_var(tc, "descr", "set up dnstap environment");
|
||||
}
|
||||
ATF_TC_BODY(create, tc) {
|
||||
isc_result_t result;
|
||||
dns_dtenv_t *dtenv = NULL;
|
||||
|
||||
UNUSED(tc);
|
||||
|
||||
cleanup();
|
||||
|
||||
result = dns_test_begin(NULL, ISC_TRUE);
|
||||
ATF_REQUIRE(result == ISC_R_SUCCESS);
|
||||
|
||||
result = dns_dt_create(mctx, dns_dtmode_file, TAPFILE, 1, &dtenv);
|
||||
ATF_CHECK_EQ(result, ISC_R_SUCCESS);
|
||||
if (dtenv != NULL)
|
||||
dns_dt_detach(&dtenv);
|
||||
|
||||
ATF_CHECK(isc_file_exists(TAPFILE));
|
||||
|
||||
result = dns_dt_create(mctx, dns_dtmode_unix, TAPSOCK, 1, &dtenv);
|
||||
ATF_CHECK_EQ(result, ISC_R_SUCCESS);
|
||||
if (dtenv != NULL)
|
||||
dns_dt_detach(&dtenv);
|
||||
|
||||
/* 'create' should succeed, but the file shouldn't exist yet */
|
||||
ATF_CHECK(!isc_file_exists(TAPSOCK));
|
||||
|
||||
result = dns_dt_create(mctx, 33, TAPSOCK, 1, &dtenv);
|
||||
ATF_CHECK_EQ(result, ISC_R_FAILURE);
|
||||
ATF_CHECK_EQ(dtenv, NULL);
|
||||
|
||||
cleanup();
|
||||
|
||||
dns_dt_shutdown();
|
||||
dns_test_end();
|
||||
}
|
||||
|
||||
ATF_TC(send);
|
||||
ATF_TC_HEAD(send, tc) {
|
||||
atf_tc_set_md_var(tc, "descr", "send dnstap messages");
|
||||
}
|
||||
ATF_TC_BODY(send, tc) {
|
||||
isc_result_t result;
|
||||
dns_dtenv_t *dtenv = NULL;
|
||||
dns_dthandle_t handle;
|
||||
isc_uint8_t *data;
|
||||
size_t dsize;
|
||||
unsigned char zone[DNS_NAME_MAXWIRE];
|
||||
unsigned char qambuffer[4096], rambuffer[4096];
|
||||
unsigned char qrmbuffer[4096], rrmbuffer[4096];
|
||||
isc_buffer_t zb, qamsg, ramsg, qrmsg, rrmsg;
|
||||
size_t qasize, qrsize, rasize, rrsize;
|
||||
dns_fixedname_t zfname;
|
||||
dns_name_t *zname;
|
||||
dns_dtmsgtype_t dt;
|
||||
dns_view_t *view = NULL;
|
||||
dns_compress_t cctx;
|
||||
isc_region_t zr;
|
||||
isc_sockaddr_t addr;
|
||||
struct in_addr in;
|
||||
isc_stdtime_t now;
|
||||
isc_time_t p, f;
|
||||
|
||||
UNUSED(tc);
|
||||
|
||||
cleanup();
|
||||
|
||||
result = dns_test_begin(NULL, ISC_TRUE);
|
||||
ATF_REQUIRE(result == ISC_R_SUCCESS);
|
||||
|
||||
result = dns_test_makeview("test", &view);
|
||||
|
||||
result = dns_dt_create(mctx, dns_dtmode_file, TAPFILE, 1, &dtenv);
|
||||
ATF_REQUIRE(result == ISC_R_SUCCESS);
|
||||
|
||||
dns_dt_attach(dtenv, &view->dtenv);
|
||||
view->dttypes = DNS_DTTYPE_ALL;
|
||||
|
||||
/*
|
||||
* Set up some test data
|
||||
*/
|
||||
dns_fixedname_init(&zfname);
|
||||
zname = dns_fixedname_name(&zfname);
|
||||
isc_buffer_constinit(&zb, "example.com.", 12);
|
||||
isc_buffer_add(&zb, 12);
|
||||
result = dns_name_fromtext(zname, &zb, NULL, 0, NULL);
|
||||
ATF_REQUIRE_EQ(result, ISC_R_SUCCESS);
|
||||
|
||||
memset(&zr, 0, sizeof(zr));
|
||||
isc_buffer_init(&zb, zone, sizeof(zone));
|
||||
result = dns_compress_init(&cctx, -1, mctx);
|
||||
dns_compress_setmethods(&cctx, DNS_COMPRESS_NONE);
|
||||
result = dns_name_towire(zname, &cctx, &zb);
|
||||
ATF_REQUIRE_EQ(result, ISC_R_SUCCESS);
|
||||
dns_compress_invalidate(&cctx);
|
||||
isc_buffer_usedregion(&zb, &zr);
|
||||
|
||||
in.s_addr = inet_addr("10.53.0.1");
|
||||
isc_sockaddr_fromin(&addr, &in, 2112);
|
||||
|
||||
isc_stdtime_get(&now);
|
||||
isc_time_set(&p, now - 3600, 0); /* past */
|
||||
isc_time_set(&f, now + 3600, 0); /* future */
|
||||
|
||||
result = dns_test_getdata("testdata/dnstap/query.auth",
|
||||
qambuffer, sizeof(qambuffer), &qasize);
|
||||
ATF_REQUIRE_EQ(result, ISC_R_SUCCESS);
|
||||
isc_buffer_init(&qamsg, qambuffer, qasize);
|
||||
isc_buffer_add(&qamsg, qasize);
|
||||
|
||||
result = dns_test_getdata("testdata/dnstap/response.auth",
|
||||
rambuffer, sizeof(rambuffer), &rasize);
|
||||
ATF_REQUIRE_EQ(result, ISC_R_SUCCESS);
|
||||
isc_buffer_init(&ramsg, rambuffer, rasize);
|
||||
isc_buffer_add(&ramsg, rasize);
|
||||
|
||||
result = dns_test_getdata("testdata/dnstap/query.recursive", qrmbuffer,
|
||||
sizeof(qrmbuffer), &qrsize);
|
||||
ATF_REQUIRE_EQ(result, ISC_R_SUCCESS);
|
||||
isc_buffer_init(&qrmsg, qrmbuffer, qrsize);
|
||||
isc_buffer_add(&qrmsg, qrsize);
|
||||
|
||||
result = dns_test_getdata("testdata/dnstap/response.recursive",
|
||||
rrmbuffer, sizeof(rrmbuffer), &rrsize);
|
||||
ATF_REQUIRE_EQ(result, ISC_R_SUCCESS);
|
||||
isc_buffer_init(&rrmsg, rrmbuffer, rrsize);
|
||||
isc_buffer_add(&rrmsg, rrsize);
|
||||
|
||||
for (dt = DNS_DTTYPE_SQ; dt <= DNS_DTTYPE_TR; dt <<= 1) {
|
||||
isc_buffer_t *m;
|
||||
|
||||
switch (dt) {
|
||||
case DNS_DTTYPE_AQ:
|
||||
m = &qamsg;
|
||||
break;
|
||||
case DNS_DTTYPE_AR:
|
||||
m = &ramsg;
|
||||
break;
|
||||
default:
|
||||
m = &qrmsg;
|
||||
if ((dt & DNS_DTTYPE_RESPONSE) != 0)
|
||||
m = &ramsg;
|
||||
break;
|
||||
}
|
||||
|
||||
dns_dt_send(view, dt, &addr, ISC_FALSE, &zr, &p, &f, m);
|
||||
dns_dt_send(view, dt, &addr, ISC_FALSE, &zr, NULL, &f, m);
|
||||
dns_dt_send(view, dt, &addr, ISC_FALSE, &zr, &p, NULL, m);
|
||||
dns_dt_send(view, dt, &addr, ISC_FALSE, &zr, NULL, NULL, m);
|
||||
dns_dt_send(view, dt, &addr, ISC_TRUE, &zr, &p, &f, m);
|
||||
dns_dt_send(view, dt, &addr, ISC_TRUE, &zr, NULL, &f, m);
|
||||
dns_dt_send(view, dt, &addr, ISC_TRUE, &zr, &p, NULL, m);
|
||||
dns_dt_send(view, dt, &addr, ISC_TRUE, &zr, NULL, NULL, m);
|
||||
}
|
||||
|
||||
dns_dt_detach(&view->dtenv);
|
||||
dns_dt_detach(&dtenv);
|
||||
dns_dt_shutdown();
|
||||
dns_view_detach(&view);
|
||||
|
||||
/*
|
||||
* XXX now read back and check content.
|
||||
*/
|
||||
|
||||
result = dns_dt_open(TAPFILE, dns_dtmode_file, &handle);
|
||||
ATF_REQUIRE_EQ(result, ISC_R_SUCCESS);
|
||||
|
||||
while (dns_dt_getframe(&handle, &data, &dsize) == ISC_R_SUCCESS) {
|
||||
dns_dtdata_t *dtdata = NULL;
|
||||
isc_region_t r;
|
||||
static dns_dtmsgtype_t expected = DNS_DTTYPE_SQ;
|
||||
static int n = 0;
|
||||
|
||||
r.base = data;
|
||||
r.length = dsize;
|
||||
|
||||
result = dns_dt_parse(mctx, &r, &dtdata);
|
||||
ATF_CHECK_EQ(result, ISC_R_SUCCESS);
|
||||
if (result != ISC_R_SUCCESS) {
|
||||
n++;
|
||||
continue;
|
||||
}
|
||||
|
||||
ATF_CHECK_EQ(dtdata->type, expected);
|
||||
if (++n % 8 == 0)
|
||||
expected <<= 1;
|
||||
|
||||
dns_dtdata_free(&dtdata);
|
||||
}
|
||||
|
||||
dns_dt_close(&handle);
|
||||
cleanup();
|
||||
|
||||
dns_test_end();
|
||||
}
|
||||
|
||||
ATF_TC(totext);
|
||||
ATF_TC_HEAD(totext, tc) {
|
||||
atf_tc_set_md_var(tc, "descr", "dnstap message to text");
|
||||
}
|
||||
ATF_TC_BODY(totext, tc) {
|
||||
isc_result_t result;
|
||||
dns_dthandle_t handle;
|
||||
isc_uint8_t *data;
|
||||
size_t dsize;
|
||||
FILE *fp = NULL;
|
||||
|
||||
UNUSED(tc);
|
||||
|
||||
result = dns_test_begin(NULL, ISC_TRUE);
|
||||
ATF_REQUIRE(result == ISC_R_SUCCESS);
|
||||
|
||||
result = dns_dt_open(TAPSAVED, dns_dtmode_file, &handle);
|
||||
ATF_REQUIRE_EQ(result, ISC_R_SUCCESS);
|
||||
|
||||
result = isc_stdio_open(TAPTEXT, "r", &fp);
|
||||
ATF_REQUIRE_EQ(result, ISC_R_SUCCESS);
|
||||
|
||||
/* make sure text conversion gets the right local time */
|
||||
setenv("TZ", "MST7", 1);
|
||||
|
||||
while (dns_dt_getframe(&handle, &data, &dsize) == ISC_R_SUCCESS) {
|
||||
dns_dtdata_t *dtdata = NULL;
|
||||
isc_buffer_t *b = NULL;
|
||||
isc_region_t r;
|
||||
char s[BUFSIZ], *p;
|
||||
|
||||
r.base = data;
|
||||
r.length = dsize;
|
||||
|
||||
/* read the corresponding line of text */
|
||||
p = fgets(s, sizeof(s), fp);
|
||||
ATF_CHECK_EQ(p, s);
|
||||
if (p == NULL)
|
||||
break;
|
||||
|
||||
p = strchr(p, '\n');
|
||||
if (p != NULL)
|
||||
*p = '\0';
|
||||
|
||||
/* parse dnstap frame */
|
||||
result = dns_dt_parse(mctx, &r, &dtdata);
|
||||
ATF_CHECK_EQ(result, ISC_R_SUCCESS);
|
||||
if (result != ISC_R_SUCCESS)
|
||||
continue;
|
||||
|
||||
isc_buffer_allocate(mctx, &b, 2048);
|
||||
ATF_CHECK(b != NULL);
|
||||
if (b == NULL)
|
||||
break;
|
||||
|
||||
/* convert to text and compare */
|
||||
result = dns_dt_datatotext(dtdata, &b);
|
||||
ATF_CHECK_EQ(result, ISC_R_SUCCESS);
|
||||
|
||||
ATF_CHECK_STREQ((char *) isc_buffer_base(b), s);
|
||||
|
||||
dns_dtdata_free(&dtdata);
|
||||
isc_buffer_free(&b);
|
||||
}
|
||||
|
||||
dns_dt_close(&handle);
|
||||
cleanup();
|
||||
|
||||
dns_test_end();
|
||||
}
|
||||
|
||||
#else
|
||||
ATF_TC(untested);
|
||||
ATF_TC_HEAD(untested, tc) {
|
||||
atf_tc_set_md_var(tc, "descr", "skipping dnstap test");
|
||||
}
|
||||
ATF_TC_BODY(untested, tc) {
|
||||
UNUSED(tc);
|
||||
atf_tc_skip("dnstap not available");
|
||||
}
|
||||
#endif
|
||||
|
||||
/*
|
||||
* Main
|
||||
*/
|
||||
ATF_TP_ADD_TCS(tp) {
|
||||
#ifdef HAVE_DNSTAP
|
||||
ATF_TP_ADD_TC(tp, create);
|
||||
ATF_TP_ADD_TC(tp, send);
|
||||
ATF_TP_ADD_TC(tp, totext);
|
||||
#else
|
||||
ATF_TP_ADD_TC(tp, untested);
|
||||
#endif
|
||||
|
||||
return (atf_no_error());
|
||||
}
|
||||
@@ -26,11 +26,13 @@
|
||||
#include <isc/app.h>
|
||||
#include <isc/buffer.h>
|
||||
#include <isc/entropy.h>
|
||||
#include <isc/file.h>
|
||||
#include <isc/hash.h>
|
||||
#include <isc/mem.h>
|
||||
#include <isc/os.h>
|
||||
#include <isc/string.h>
|
||||
#include <isc/socket.h>
|
||||
#include <isc/stdio.h>
|
||||
#include <isc/task.h>
|
||||
#include <isc/timer.h>
|
||||
#include <isc/util.h>
|
||||
@@ -341,3 +343,71 @@ dns_test_loaddb(dns_db_t **db, dns_dbtype_t dbtype, const char *origin,
|
||||
result = dns_db_load(*db, testfile);
|
||||
return (result);
|
||||
}
|
||||
|
||||
static int
|
||||
fromhex(char c) {
|
||||
if (c >= '0' && c <= '9')
|
||||
return (c - '0');
|
||||
else if (c >= 'a' && c <= 'f')
|
||||
return (c - 'a' + 10);
|
||||
else if (c >= 'A' && c <= 'F')
|
||||
return (c - 'A' + 10);
|
||||
|
||||
printf("bad input format: %02x\n", c);
|
||||
exit(3);
|
||||
/* NOTREACHED */
|
||||
}
|
||||
|
||||
isc_result_t
|
||||
dns_test_getdata(const char *file, unsigned char *buf,
|
||||
size_t bufsiz, size_t *sizep)
|
||||
{
|
||||
isc_result_t result;
|
||||
unsigned char *bp;
|
||||
char *rp, *wp;
|
||||
char s[BUFSIZ];
|
||||
size_t len, i;
|
||||
FILE *f;
|
||||
int n;
|
||||
|
||||
result = isc_stdio_open(file, "r", &f);
|
||||
if (result != ISC_R_SUCCESS)
|
||||
return (result);
|
||||
|
||||
bp = buf;
|
||||
while (fgets(s, sizeof(s), f) != NULL) {
|
||||
rp = s;
|
||||
wp = s;
|
||||
len = 0;
|
||||
while (*rp != '\0') {
|
||||
if (*rp == '#')
|
||||
break;
|
||||
if (*rp != ' ' && *rp != '\t' &&
|
||||
*rp != '\r' && *rp != '\n') {
|
||||
*wp++ = *rp;
|
||||
len++;
|
||||
}
|
||||
rp++;
|
||||
}
|
||||
if (len == 0U)
|
||||
continue;
|
||||
if (len % 2 != 0U)
|
||||
return (ISC_R_UNEXPECTEDEND);
|
||||
if (len > bufsiz * 2)
|
||||
return (ISC_R_NOSPACE);
|
||||
rp = s;
|
||||
for (i = 0; i < len; i += 2) {
|
||||
n = fromhex(*rp++);
|
||||
n *= 16;
|
||||
n += fromhex(*rp++);
|
||||
*bp++ = n;
|
||||
}
|
||||
}
|
||||
|
||||
isc_stdio_close(f);
|
||||
|
||||
*sizep = bp - buf;
|
||||
|
||||
return (ISC_R_SUCCESS);
|
||||
}
|
||||
|
||||
|
||||
@@ -82,3 +82,7 @@ dns_test_nap(isc_uint32_t usec);
|
||||
isc_result_t
|
||||
dns_test_loaddb(dns_db_t **db, dns_dbtype_t dbtype, const char *origin,
|
||||
const char *testfile);
|
||||
|
||||
isc_result_t
|
||||
dns_test_getdata(const char *file, unsigned char *buf,
|
||||
size_t bufsiz, size_t *sizep);
|
||||
|
||||
BIN
lib/dns/tests/testdata/dnstap/dnstap.saved
vendored
Normal file
BIN
lib/dns/tests/testdata/dnstap/dnstap.saved
vendored
Normal file
Binary file not shown.
96
lib/dns/tests/testdata/dnstap/dnstap.text
vendored
Normal file
96
lib/dns/tests/testdata/dnstap/dnstap.text
vendored
Normal file
@@ -0,0 +1,96 @@
|
||||
18-Sep-2015 12:06:38.000 SQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 SQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 SQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 SQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 SR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 SR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 SR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 SR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 CQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 CQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 CQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 CQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 CR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 CR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 CR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 CR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 AQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 AQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 AQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 AQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 AR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 AR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 AR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 AR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 RQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 RQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 RQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 RQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 RR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 RR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 RR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 RR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 FQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 FQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 FQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 FQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 FR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 FR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 FR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 FR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 TQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 TQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 TQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 TQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 TR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 TR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 TR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 TR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
4
lib/dns/tests/testdata/dnstap/query.auth
vendored
Normal file
4
lib/dns/tests/testdata/dnstap/query.auth
vendored
Normal file
@@ -0,0 +1,4 @@
|
||||
# authoritative query, www.isc.org/A
|
||||
8d 24 00 20 00 01 00 00 00 00 00 01 03 77 77 77
|
||||
03 69 73 63 03 6f 72 67 00 00 01 00 01 00 00 29
|
||||
10 00 00 00 00 00 00 00
|
||||
4
lib/dns/tests/testdata/dnstap/query.recursive
vendored
Normal file
4
lib/dns/tests/testdata/dnstap/query.recursive
vendored
Normal file
@@ -0,0 +1,4 @@
|
||||
# recursive query for www.isc.org/A
|
||||
bf 08 01 20 00 01 00 00 00 00 00 01 03 77 77 77
|
||||
03 69 73 63 03 6f 72 67 00 00 01 00 01 00 00 29
|
||||
10 00 00 00 00 00 00 00
|
||||
19
lib/dns/tests/testdata/dnstap/response.auth
vendored
Normal file
19
lib/dns/tests/testdata/dnstap/response.auth
vendored
Normal file
@@ -0,0 +1,19 @@
|
||||
# authoritative response, www.isc.org/A
|
||||
8d 24 84 00 00 01 00 01 00 04 00 07 03 77 77 77
|
||||
03 69 73 63 03 6f 72 67 00 00 01 00 01 c0 0c 00
|
||||
01 00 01 00 00 00 3c 00 04 95 14 40 45 c0 10 00
|
||||
02 00 01 00 00 1c 20 00 0d 03 61 6d 73 06 73 6e
|
||||
73 2d 70 62 c0 10 c0 10 00 02 00 01 00 00 1c 20
|
||||
00 07 04 73 66 62 61 c0 3d c0 10 00 02 00 01 00
|
||||
00 1c 20 00 19 02 6e 73 03 69 73 63 0b 61 66 69
|
||||
6c 69 61 73 2d 6e 73 74 04 69 6e 66 6f 00 c0 10
|
||||
00 02 00 01 00 00 1c 20 00 06 03 6f 72 64 c0 3d
|
||||
c0 39 00 01 00 01 00 00 1c 20 00 04 c7 06 01 1e
|
||||
c0 39 00 1c 00 01 00 00 1c 20 00 10 20 01 05 00
|
||||
00 60 00 00 00 00 00 00 00 00 00 30 c0 8a 00 01
|
||||
00 01 00 00 1c 20 00 04 c7 06 00 1e c0 8a 00 1c
|
||||
00 01 00 00 1c 20 00 10 20 01 05 00 00 71 00 00
|
||||
00 00 00 00 00 00 00 30 c0 52 00 01 00 01 00 00
|
||||
1c 20 00 04 95 14 40 03 c0 52 00 1c 00 01 00 00
|
||||
1c 20 00 10 20 01 04 f8 00 00 00 02 00 00 00 00
|
||||
00 00 00 19 00 00 29 10 00 00 00 00 00 00 00
|
||||
19
lib/dns/tests/testdata/dnstap/response.recursive
vendored
Normal file
19
lib/dns/tests/testdata/dnstap/response.recursive
vendored
Normal file
@@ -0,0 +1,19 @@
|
||||
# recursive response, www.isc.org/A
|
||||
bf 08 81 a0 00 01 00 01 00 04 00 07 03 77 77 77
|
||||
03 69 73 63 03 6f 72 67 00 00 01 00 01 c0 0c 00
|
||||
01 00 01 00 00 00 15 00 04 95 14 40 45 c0 10 00
|
||||
02 00 01 00 00 1b a6 00 0e 04 73 66 62 61 06 73
|
||||
6e 73 2d 70 62 c0 10 c0 10 00 02 00 01 00 00 1b
|
||||
a6 00 06 03 6f 72 64 c0 3e c0 10 00 02 00 01 00
|
||||
00 1b a6 00 19 02 6e 73 03 69 73 63 0b 61 66 69
|
||||
6c 69 61 73 2d 6e 73 74 04 69 6e 66 6f 00 c0 10
|
||||
00 02 00 01 00 00 1b a6 00 06 03 61 6d 73 c0 3e
|
||||
c0 8a 00 01 00 01 00 00 b1 d5 00 04 c7 06 01 1e
|
||||
c0 8a 00 1c 00 01 00 00 b1 d5 00 10 20 01 05 00
|
||||
00 60 00 00 00 00 00 00 00 00 00 30 c0 53 00 01
|
||||
00 01 00 00 b1 d5 00 04 c7 06 00 1e c0 53 00 1c
|
||||
00 01 00 00 b1 d5 00 10 20 01 05 00 00 71 00 00
|
||||
00 00 00 00 00 00 00 30 c0 39 00 01 00 01 00 00
|
||||
b1 d5 00 04 95 14 40 03 c0 39 00 1c 00 01 00 00
|
||||
b1 d5 00 10 20 01 04 f8 00 00 00 02 00 00 00 00
|
||||
00 00 00 19 00 00 29 10 00 00 00 00 00 00 00
|
||||
Reference in New Issue
Block a user