Project

General

Profile

Actions

Feature #14298

closed

snoop could know more DNS resource record types

Added by Sebastian Wiedenroth 6 months ago. Updated 6 months ago.

Status:
Closed
Priority:
Normal
Category:
cmd - userland programs
Start date:
Due date:
% Done:

100%

Estimated time:
Difficulty:
Bite-size
Tags:
Gerrit CR:

Description

A while ago I noticed that snoop did not know about a few record types I was interested in (specifically SRV and CAA).
I updated it with details from https://www.iana.org/assignments/dns-parameters/dns-parameters.xhtml#dns-parameters-4.

Actions #1

Updated by Electric Monk 6 months ago

  • Gerrit CR set to 1861
Actions #2

Updated by Sebastian Wiedenroth 6 months ago

Testing:

On one terminal started snoop port 53

On another trigger dns queries like:

host -t A example.com
host -t TXT example.com
host -t LOC example.com
host -t SSHFP example.com
host -t NSEC example.com
host -t CAA example.com

See expected output:

192.168.15.237 -> 192.168.10.53 DNS C example.com. IN A ?
192.168.10.53 -> 192.168.15.237 DNS R example.com. IN A 93.184.216.34
192.168.15.237 -> 192.168.10.53 DNS C example.com. IN TXT ?
192.168.10.53 -> 192.168.15.237 DNS R example.com. IN TXT 
192.168.15.237 -> 192.168.10.53 DNS C example.com. IN LOC ?
192.168.10.53 -> 192.168.15.237 DNS R 
192.168.15.237 -> 192.168.10.53 DNS C example.com. IN SSHFP ?
192.168.10.53 -> 192.168.15.237 DNS R 
192.168.15.237 -> 192.168.10.53 DNS C example.com. IN NSEC ?
192.168.10.53 -> 192.168.15.237 DNS R example.com. IN NSEC 
192.168.15.237 -> 192.168.10.53 DNS C example.com. IN CAA ?
192.168.10.53 -> 192.168.15.237 DNS R 

With snoop in verbose mode the new type is also displayed correctly:

DNS:  ----- DNS Header -----
DNS:  
DNS:  Response ID = 18716
DNS:  RA (Recursion Available) 
DNS:  Response Code: 0 (OK)
DNS:  Reply to 1 question(s)
DNS:      Domain Name: example.com.
DNS:      Class: 1 (Internet)
DNS:      Type:  257 (Certification Authority Restriction)
DNS:  
DNS:  0 answer(s)
DNS:  1 name server resource(s)
DNS:      Domain Name: example.com.
DNS:      Class: 1 (Internet)
DNS:      Type:  6 (Start Of a zone Authority)
DNS:      TTL (Time To Live): 3362
DNS:      Start Of a zone Authority: 
DNS:      MNAME (Server name): ns.icann.org.
DNS:      RNAME (Resposible mailbox): noc.dns.icann.org.
DNS:      Serial: 2021120702
DNS:      Refresh: 7200  Retry: 3600  Expire: 1209600 Minimum: 3600
DNS:  
DNS:  0 additional record(s)
<pre>
Actions #3

Updated by Electric Monk 6 months ago

  • Status changed from New to Closed
  • % Done changed from 80 to 100

git commit ffe0b5fa2f11b603291b4b98b4f727bc8c8dbd9c

commit  ffe0b5fa2f11b603291b4b98b4f727bc8c8dbd9c
Author: Sebastian Wiedenroth <wiedi@frubar.net>
Date:   2021-12-13T16:31:06.000Z

    14298 snoop could know more DNS resource record types
    Reviewed by: Jason King <jason.brian.king+illumos@gmail.com>
    Reviewed by: Yuri Pankov <ypankov@tintri.com>
    Reviewed by: Peter Tribble <peter.tribble@gmail.com>
    Reviewed by: C Fraire <cfraire@me.com>
    Approved by: Dan McDonald <danmcd@joyent.com>

Actions

Also available in: Atom PDF