dns

Documentation

Index

• func GetQuestions(nfp *netfilter.Packet) (questions []string)
• func Host(resolved string) (host string, found bool)
• func HostOr(ip net.IP, or string) string
• func ListenerEbpf(ebpfModPath string) error
• func Track(resolved string, hostname string)
• func TrackAnswers(packet gopacket.Packet) bool

Functions

func GetQuestions

func GetQuestions(nfp *netfilter.Packet) (questions []string)

GetQuestions retrieves the domain names a process is trying to resolve.

func Host

func Host(resolved string) (host string, found bool)

Host returns if a resolved domain is in the list.

func HostOr

func HostOr(ip net.IP, or string) string

HostOr checks if an IP has a domain name already resolved. If the domain is in the list it's returned, otherwise the IP will be returned.

func ListenerEbpf

func ListenerEbpf(ebpfModPath string) error

ListenerEbpf starts listening for DNS events.

func Track

func Track(resolved string, hostname string)

Track adds a resolved domain to the list.

func TrackAnswers

func TrackAnswers(packet gopacket.Packet) bool

TrackAnswers obtains the resolved domains of a DNS query. If the packet is UDP DNS, the domain names are added to the list of resolved domains.