Bug ID |
8758
|
Summary |
Added AAAA type to the DNS dissector fields
|
Classification |
Unclassified
|
Product |
Wireshark
|
Version |
SVN
|
Hardware |
x86
|
OS |
Debian
|
Status |
UNCONFIRMED
|
Severity |
Enhancement
|
Priority |
Low
|
Component |
Dissection engine (libwireshark)
|
Assignee |
[email protected]
|
Reporter |
[email protected]
|
Created attachment 10906 [details]
Create the new field "dsn.resp.addr6" that holds the AAAA address
Build Information:
root@server:/usr/local/src/wireshark-svn# tshark -v
TShark 1.11.0 (SVN Rev 49629 from /trunk)
Copyright 1998-2013 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with GLib 2.32.3, with libpcap, with libz 1.2.3.4, without
POSIX capabilities, without libnl, without SMI, without c-ares, without ADNS,
with Lua 5.2, without Python, without GnuTLS, without Gcrypt, without Kerberos,
without GeoIP.
Running on Linux 3.2.0-33-generic, with locale en_US.UTF-8, with libpcap
version
1.1.1, with libz 1.2.3.4.
AMD Opteron(tm) Processor 6176 SE
Built using gcc 4.6.3.
root@server:/usr/local/src/wireshark-svn# uname -a
Linux server 3.2.0-33-generic #52-Ubuntu SMP Thu Oct 18 16:29:15 UTC 2012
x86_64 x86_64 x86_64 GNU/Linux
--
Writing a LUA tap I noticed that the DNS AAAA type is not linked with any field
in the DNS dissector so I was unable to use it within my tap.
The simple patch attached populates it in the field "dns.resp.addr6".
Results follows:
root@server:~# /usr/local/bin/tshark -2 -Q -n -r dns-ip6.pcap -X
lua_script:test.lua
Running as user "root" and group "root". This could be dangerous.
DNS 1370007531.655144000 www.google.es AAAA
AAAA:2a00:1450:4003:802::1017
DNS 1370007536.552472000 www.google.com AAAA
AAAA:2a00:1450:4003:802::1012
You are receiving this mail because:
- You are watching all bug changes.