diff options
Diffstat (limited to 'src')
45 files changed, 2662 insertions, 1207 deletions
diff --git a/src/Makefile.am b/src/Makefile.am index e194d95..d46dd85 100644 --- a/src/Makefile.am +++ b/src/Makefile.am @@ -17,7 +17,8 @@ bin_PROGRAMS = dnscap dnscap_SOURCES = args.c assert.c bpft.c daemon.c dnscap.c dump_cbor.c \ dump_cds.c dump_dns.c dumper.c endpoint.c hashtbl.c iaddr.c log.c \ network.c options.c pcaps.c sig.c tcpstate.c tcpreasm.c memzero.c \ - pcap-thread/pcap_thread.c pcap-thread/pcap_thread_ext_frag.c + pcap-thread/pcap_thread.c pcap-thread/pcap_thread_ext_frag.c \ + ext/lookup3.c dist_dnscap_SOURCES = args.h bpft.h daemon.h dnscap_common.h dnscap.h \ dump_cbor.h dump_cds.h dump_dns.h dumper.h endpoint.h hashtbl.h iaddr.h \ log.h network.h options.h pcaps.h sig.h tcpstate.h tcpreasm.h memzero.h \ diff --git a/src/Makefile.in b/src/Makefile.in index 8f93ac4..a5cf3e2 100644 --- a/src/Makefile.in +++ b/src/Makefile.in @@ -1,7 +1,7 @@ -# Makefile.in generated by automake 1.16.1 from Makefile.am. +# Makefile.in generated by automake 1.16.5 from Makefile.am. # @configure_input@ -# Copyright (C) 1994-2018 Free Software Foundation, Inc. +# Copyright (C) 1994-2021 Free Software Foundation, Inc. # This Makefile.in is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, @@ -118,7 +118,8 @@ am_dnscap_OBJECTS = args.$(OBJEXT) assert.$(OBJEXT) bpft.$(OBJEXT) \ pcaps.$(OBJEXT) sig.$(OBJEXT) tcpstate.$(OBJEXT) \ tcpreasm.$(OBJEXT) memzero.$(OBJEXT) \ pcap-thread/pcap_thread.$(OBJEXT) \ - pcap-thread/pcap_thread_ext_frag.$(OBJEXT) + pcap-thread/pcap_thread_ext_frag.$(OBJEXT) \ + ext/lookup3.$(OBJEXT) dist_dnscap_OBJECTS = dnscap_OBJECTS = $(am_dnscap_OBJECTS) $(dist_dnscap_OBJECTS) am__DEPENDENCIES_1 = @@ -152,7 +153,7 @@ am__depfiles_remade = ./$(DEPDIR)/args.Po ./$(DEPDIR)/assert.Po \ ./$(DEPDIR)/memzero.Po ./$(DEPDIR)/network.Po \ ./$(DEPDIR)/options.Po ./$(DEPDIR)/pcaps.Po ./$(DEPDIR)/sig.Po \ ./$(DEPDIR)/tcpreasm.Po ./$(DEPDIR)/tcpstate.Po \ - pcap-thread/$(DEPDIR)/pcap_thread.Po \ + ext/$(DEPDIR)/lookup3.Po pcap-thread/$(DEPDIR)/pcap_thread.Po \ pcap-thread/$(DEPDIR)/pcap_thread_ext_frag.Po am__mv = mv -f COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \ @@ -227,8 +228,8 @@ am__recursive_targets = \ AM_RECURSIVE_TARGETS = $(am__recursive_targets:-recursive=) TAGS CTAGS \ distdir distdir-am am__extra_recursive_targets = gcov-recursive -am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) \ - $(LISP)config.h.in +am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP) \ + config.h.in # Read a list of newline-separated strings from the standard input, # and print each of them once, without duplicates. Input order is # *not* preserved. @@ -245,8 +246,6 @@ am__define_uniq_tagged_files = \ unique=`for i in $$list; do \ if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \ done | $(am__uniquify_input)` -ETAGS = etags -CTAGS = ctags DIST_SUBDIRS = $(SUBDIRS) am__DIST_COMMON = $(srcdir)/Makefile.in $(srcdir)/config.h.in \ $(top_srcdir)/depcomp @@ -289,6 +288,8 @@ CCDEPMODE = @CCDEPMODE@ CFLAGS = @CFLAGS@ CPP = @CPP@ CPPFLAGS = @CPPFLAGS@ +CSCOPE = @CSCOPE@ +CTAGS = @CTAGS@ CYGPATH_W = @CYGPATH_W@ DEFS = @DEFS@ DEPDIR = @DEPDIR@ @@ -299,6 +300,7 @@ ECHO_C = @ECHO_C@ ECHO_N = @ECHO_N@ ECHO_T = @ECHO_T@ EGREP = @EGREP@ +ETAGS = @ETAGS@ EXEEXT = @EXEEXT@ FGREP = @FGREP@ GREP = @GREP@ @@ -418,7 +420,8 @@ EXTRA_DIST = dnscap.1.in dnscap_SOURCES = args.c assert.c bpft.c daemon.c dnscap.c dump_cbor.c \ dump_cds.c dump_dns.c dumper.c endpoint.c hashtbl.c iaddr.c log.c \ network.c options.c pcaps.c sig.c tcpstate.c tcpreasm.c memzero.c \ - pcap-thread/pcap_thread.c pcap-thread/pcap_thread_ext_frag.c + pcap-thread/pcap_thread.c pcap-thread/pcap_thread_ext_frag.c \ + ext/lookup3.c dist_dnscap_SOURCES = args.h bpft.h daemon.h dnscap_common.h dnscap.h \ dump_cbor.h dump_cds.h dump_dns.h dumper.h endpoint.h hashtbl.h iaddr.h \ @@ -537,6 +540,14 @@ pcap-thread/pcap_thread.$(OBJEXT): pcap-thread/$(am__dirstamp) \ pcap-thread/pcap_thread_ext_frag.$(OBJEXT): \ pcap-thread/$(am__dirstamp) \ pcap-thread/$(DEPDIR)/$(am__dirstamp) +ext/$(am__dirstamp): + @$(MKDIR_P) ext + @: > ext/$(am__dirstamp) +ext/$(DEPDIR)/$(am__dirstamp): + @$(MKDIR_P) ext/$(DEPDIR) + @: > ext/$(DEPDIR)/$(am__dirstamp) +ext/lookup3.$(OBJEXT): ext/$(am__dirstamp) \ + ext/$(DEPDIR)/$(am__dirstamp) dnscap$(EXEEXT): $(dnscap_OBJECTS) $(dnscap_DEPENDENCIES) $(EXTRA_dnscap_DEPENDENCIES) @rm -f dnscap$(EXEEXT) @@ -544,6 +555,7 @@ dnscap$(EXEEXT): $(dnscap_OBJECTS) $(dnscap_DEPENDENCIES) $(EXTRA_dnscap_DEPENDE mostlyclean-compile: -rm -f *.$(OBJEXT) + -rm -f ext/*.$(OBJEXT) -rm -f pcap-thread/*.$(OBJEXT) distclean-compile: @@ -569,6 +581,7 @@ distclean-compile: @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/sig.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/tcpreasm.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/tcpstate.Po@am__quote@ # am--include-marker +@AMDEP_TRUE@@am__include@ @am__quote@ext/$(DEPDIR)/lookup3.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@pcap-thread/$(DEPDIR)/pcap_thread.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@pcap-thread/$(DEPDIR)/pcap_thread_ext_frag.Po@am__quote@ # am--include-marker @@ -748,7 +761,6 @@ cscopelist-am: $(am__tagged_files) distclean-tags: -rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags - distdir: $(BUILT_SOURCES) $(MAKE) $(AM_MAKEFLAGS) distdir-am @@ -842,6 +854,8 @@ clean-generic: distclean-generic: -test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES) -test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES) + -rm -f ext/$(DEPDIR)/$(am__dirstamp) + -rm -f ext/$(am__dirstamp) -rm -f pcap-thread/$(DEPDIR)/$(am__dirstamp) -rm -f pcap-thread/$(am__dirstamp) @@ -875,6 +889,7 @@ distclean: distclean-recursive -rm -f ./$(DEPDIR)/sig.Po -rm -f ./$(DEPDIR)/tcpreasm.Po -rm -f ./$(DEPDIR)/tcpstate.Po + -rm -f ext/$(DEPDIR)/lookup3.Po -rm -f pcap-thread/$(DEPDIR)/pcap_thread.Po -rm -f pcap-thread/$(DEPDIR)/pcap_thread_ext_frag.Po -rm -f Makefile @@ -946,6 +961,7 @@ maintainer-clean: maintainer-clean-recursive -rm -f ./$(DEPDIR)/sig.Po -rm -f ./$(DEPDIR)/tcpreasm.Po -rm -f ./$(DEPDIR)/tcpstate.Po + -rm -f ext/$(DEPDIR)/lookup3.Po -rm -f pcap-thread/$(DEPDIR)/pcap_thread.Po -rm -f pcap-thread/$(DEPDIR)/pcap_thread_ext_frag.Po -rm -f Makefile @@ -41,7 +41,7 @@ void prepare_bpft(void) { - unsigned udp10_mbs, udp10_mbc, udp11_mbc; //udp11_mbs + unsigned udp10_mbs, udp10_mbc, udp11_mbc; // udp11_mbs text_list bpfl; text_ptr text; size_t len; @@ -70,13 +70,13 @@ void prepare_bpft(void) } /* - * Model - * (vlan) and (transport) - * (vlan) and ((icmp) or (frags) or (dns)) - * (vlan) and ((icmp) or (frags) or ((ports) and (hosts))) - * (vlan) and ((icmp) or (frags) or (((tcp) or (udp)) and (hosts))) - * [(vlan) and] ( [(icmp) or] [(frags) or] ( ( [(tcp) or] (udp) ) [and (hosts)] ) ) - */ + * Model + * (vlan) and (transport) + * (vlan) and ((icmp) or (frags) or (dns)) + * (vlan) and ((icmp) or (frags) or ((ports) and (hosts))) + * (vlan) and ((icmp) or (frags) or (((tcp) or (udp)) and (hosts))) + * [(vlan) and] ( [(icmp) or] [(frags) or] ( ( [(tcp) or] (udp) ) [and (hosts)] ) ) + */ /* Make a BPF program to do early course kernel-level filtering. */ INIT_LIST(bpfl); diff --git a/src/config.h.in b/src/config.h.in index b0f7a22..3d0a228 100644 --- a/src/config.h.in +++ b/src/config.h.in @@ -81,9 +81,6 @@ /* Define to 1 if you have the <machine/endian.h> header file. */ #undef HAVE_MACHINE_ENDIAN_H -/* Define to 1 if you have the <memory.h> header file. */ -#undef HAVE_MEMORY_H - /* Define to 1 if you have the <netdb.h> header file. */ #undef HAVE_NETDB_H @@ -163,6 +160,9 @@ /* Define to 1 if you have the <stdint.h> header file. */ #undef HAVE_STDINT_H +/* Define to 1 if you have the <stdio.h> header file. */ +#undef HAVE_STDIO_H + /* Define to 1 if you have the <stdlib.h> header file. */ #undef HAVE_STDLIB_H @@ -230,10 +230,13 @@ your system. */ #undef PTHREAD_CREATE_JOINABLE -/* Define to 1 if you have the ANSI C header files. */ +/* Define to 1 if all of the C90 standard headers exist (not just the ones + required in a freestanding environment). This macro is provided for + backward compatibility; new code need not use it. */ #undef STDC_HEADERS -/* Define to 1 if you can safely include both <sys/time.h> and <time.h>. */ +/* Define to 1 if you can safely include both <sys/time.h> and <time.h>. This + macro is obsolete. */ #undef TIME_WITH_SYS_TIME /* Define this to enable Linux seccomp-bpf sandbox. */ diff --git a/src/dnscap.h b/src/dnscap.h index ebdde87..e079ec9 100644 --- a/src/dnscap.h +++ b/src/dnscap.h @@ -297,9 +297,19 @@ struct tcpreasm { size_t bfb_at; }; +struct tcpstate_key { + iaddr* saddr; + iaddr* daddr; + unsigned sport; + unsigned dport; +}; +typedef struct tcpstate_key tcpstate_key; + struct tcpstate { LINK(struct tcpstate) link; + tcpstate_key key; + iaddr saddr; iaddr daddr; uint16_t sport; diff --git a/src/dnscap_common.h b/src/dnscap_common.h index fa869cd..a1f05d9 100644 --- a/src/dnscap_common.h +++ b/src/dnscap_common.h @@ -116,10 +116,10 @@ typedef int filter_t(const char* descr, unsigned sport, unsigned dport, my_bpftimeval ts, - const u_char* pkt_copy, - const unsigned olen, - const u_char* payload, - const unsigned payloadlen); + u_char* pkt_copy, + unsigned olen, + u_char* payload, + unsigned payloadlen); /* * Extensions diff --git a/src/dumper.c b/src/dumper.c index 95d92a5..88d83fd 100644 --- a/src/dumper.c +++ b/src/dumper.c @@ -44,8 +44,8 @@ */ void output(const char* descr, iaddr from, iaddr to, uint8_t proto, unsigned flags, unsigned sport, unsigned dport, my_bpftimeval ts, - const u_char* pkt_copy, const unsigned olen, - const u_char* payload, const unsigned payloadlen) + u_char* pkt_copy, const unsigned olen, + u_char* payload, const unsigned payloadlen) { struct plugin* p; diff --git a/src/dumper.h b/src/dumper.h index cec2ddd..ffef7cd 100644 --- a/src/dumper.h +++ b/src/dumper.h @@ -39,8 +39,8 @@ void output(const char* descr, iaddr from, iaddr to, uint8_t proto, unsigned flags, unsigned sport, unsigned dport, my_bpftimeval ts, - const u_char* pkt_copy, const unsigned olen, - const u_char* payload, const unsigned payloadlen); + u_char* pkt_copy, const unsigned olen, + u_char* payload, const unsigned payloadlen); int dumper_open(my_bpftimeval ts); int dumper_close(my_bpftimeval ts); diff --git a/src/ext/lookup3.c b/src/ext/lookup3.c new file mode 100644 index 0000000..99694a5 --- /dev/null +++ b/src/ext/lookup3.c @@ -0,0 +1,1235 @@ +/* +------------------------------------------------------------------------------- +lookup3.c, by Bob Jenkins, May 2006, Public Domain. + +These are functions for producing 32-bit hashes for hash table lookup. +hashword(), hashlittle(), hashlittle2(), hashbig(), mix(), and final() +are externally useful functions. Routines to test the hash are included +if SELF_TEST is defined. You can use this free for any purpose. It's in +the public domain. It has no warranty. + +You probably want to use hashlittle(). hashlittle() and hashbig() +hash byte arrays. hashlittle() is is faster than hashbig() on +little-endian machines. Intel and AMD are little-endian machines. +On second thought, you probably want hashlittle2(), which is identical to +hashlittle() except it returns two 32-bit hashes for the price of one. +You could implement hashbig2() if you wanted but I haven't bothered here. + +If you want to find a hash of, say, exactly 7 integers, do + a = i1; b = i2; c = i3; + mix(a,b,c); + a += i4; b += i5; c += i6; + mix(a,b,c); + a += i7; + final(a,b,c); +then use c as the hash value. If you have a variable length array of +4-byte integers to hash, use hashword(). If you have a byte array (like +a character string), use hashlittle(). If you have several byte arrays, or +a mix of things, see the comments above hashlittle(). + +Why is this so big? I read 12 bytes at a time into 3 4-byte integers, +then mix those integers. This is fast (you can do a lot more thorough +mixing with 12*3 instructions on 3 integers than you can with 3 instructions +on 1 byte), but shoehorning those bytes into integers efficiently is messy. +------------------------------------------------------------------------------- +*/ +#define SELF_TEST 0 + +#include <stdio.h> /* defines printf for tests */ +#include <time.h> /* defines time_t for timings in the test */ +#if defined (__SVR4) && defined (__sun) +#include <sys/inttypes.h> +#else +#include <stdint.h> /* defines uint32_t etc */ +#endif +#include <sys/param.h> /* attempt to define endianness */ +#ifdef linux +#include <endian.h> /* attempt to define endianness */ +#endif + +/* + * My best guess at if you are big-endian or little-endian. This may + * need adjustment. + */ +#if (defined(__BYTE_ORDER) && defined(__LITTLE_ENDIAN) && \ + __BYTE_ORDER == __LITTLE_ENDIAN) || \ + (defined(i386) || defined(__i386__) || defined(__i486__) || \ + defined(__i586__) || defined(__i686__) || defined(vax) || defined(MIPSEL)) +#define HASH_LITTLE_ENDIAN 1 +#define HASH_BIG_ENDIAN 0 +#elif (defined(__BYTE_ORDER) && defined(__BIG_ENDIAN) && \ + __BYTE_ORDER == __BIG_ENDIAN) || \ + (defined(sparc) || defined(POWERPC) || defined(mc68000) || defined(sel)) +#define HASH_LITTLE_ENDIAN 0 +#define HASH_BIG_ENDIAN 1 +#else +#define HASH_LITTLE_ENDIAN 0 +#define HASH_BIG_ENDIAN 0 +#endif + +#define hashsize(n) ((uint32_t)1<<(n)) +#define hashmask(n) (hashsize(n)-1) +#define rot(x,k) (((x)<<(k)) | ((x)>>(32-(k)))) + +/* +------------------------------------------------------------------------------- +mix -- mix 3 32-bit values reversibly. + +This is reversible, so any information in (a,b,c) before mix() is +still in (a,b,c) after mix(). + +If four pairs of (a,b,c) inputs are run through mix(), or through +mix() in reverse, there are at least 32 bits of the output that +are sometimes the same for one pair and different for another pair. +This was tested for: +* pairs that differed by one bit, by two bits, in any combination + of top bits of (a,b,c), or in any combination of bottom bits of + (a,b,c). +* "differ" is defined as +, -, ^, or ~^. For + and -, I transformed + the output delta to a Gray code (a^(a>>1)) so a string of 1's (as + is commonly produced by subtraction) look like a single 1-bit + difference. +* the base values were pseudorandom, all zero but one bit set, or + all zero plus a counter that starts at zero. + +Some k values for my "a-=c; a^=rot(c,k); c+=b;" arrangement that +satisfy this are + 4 6 8 16 19 4 + 9 15 3 18 27 15 + 14 9 3 7 17 3 +Well, "9 15 3 18 27 15" didn't quite get 32 bits diffing +for "differ" defined as + with a one-bit base and a two-bit delta. I +used http://burtleburtle.net/bob/hash/avalanche.html to choose +the operations, constants, and arrangements of the variables. + +This does not achieve avalanche. There are input bits of (a,b,c) +that fail to affect some output bits of (a,b,c), especially of a. The +most thoroughly mixed value is c, but it doesn't really even achieve +avalanche in c. + +This allows some parallelism. Read-after-writes are good at doubling +the number of bits affected, so the goal of mixing pulls in the opposite +direction as the goal of parallelism. I did what I could. Rotates +seem to cost as much as shifts on every machine I could lay my hands +on, and rotates are much kinder to the top and bottom bits, so I used +rotates. +------------------------------------------------------------------------------- +*/ +#define mix(a,b,c) \ +{ \ + a -= c; a ^= rot(c, 4); c += b; \ + b -= a; b ^= rot(a, 6); a += c; \ + c -= b; c ^= rot(b, 8); b += a; \ + a -= c; a ^= rot(c,16); c += b; \ + b -= a; b ^= rot(a,19); a += c; \ + c -= b; c ^= rot(b, 4); b += a; \ +} + +/* +------------------------------------------------------------------------------- +final -- final mixing of 3 32-bit values (a,b,c) into c + +Pairs of (a,b,c) values differing in only a few bits will usually +produce values of c that look totally different. This was tested for +* pairs that differed by one bit, by two bits, in any combination + of top bits of (a,b,c), or in any combination of bottom bits of + (a,b,c). +* "differ" is defined as +, -, ^, or ~^. For + and -, I transformed + the output delta to a Gray code (a^(a>>1)) so a string of 1's (as + is commonly produced by subtraction) look like a single 1-bit + difference. +* the base values were pseudorandom, all zero but one bit set, or + all zero plus a counter that starts at zero. + +These constants passed: + 14 11 25 16 4 14 24 + 12 14 25 16 4 14 24 +and these came close: + 4 8 15 26 3 22 24 + 10 8 15 26 3 22 24 + 11 8 15 26 3 22 24 +------------------------------------------------------------------------------- +*/ +#define final(a,b,c) \ +{ \ + c ^= b; c -= rot(b,14); \ + a ^= c; a -= rot(c,11); \ + b ^= a; b -= rot(a,25); \ + c ^= b; c -= rot(b,16); \ + a ^= c; a -= rot(c,4); \ + b ^= a; b -= rot(a,14); \ + c ^= b; c -= rot(b,24); \ +} + +/* +-------------------------------------------------------------------- + This works on all machines. To be useful, it requires + -- that the key be an array of uint32_t's, and + -- that the length be the number of uint32_t's in the key + + The function hashword() is identical to hashlittle() on little-endian + machines, and identical to hashbig() on big-endian machines, + except that the length has to be measured in uint32_ts rather than in + bytes. hashlittle() is more complicated than hashword() only because + hashlittle() has to dance around fitting the key bytes into registers. +-------------------------------------------------------------------- +*/ +uint32_t +hashword(const uint32_t * k, /* the key, an array of uint32_t values */ + size_t length, /* the length of the key, in uint32_ts */ + uint32_t initval) +{ /* the previous hash, or an arbitrary value */ + uint32_t a, b, c; + + /* Set up the internal state */ + a = b = c = 0xdeadbeef + (((uint32_t) length) << 2) + initval; + + /*------------------------------------------------- handle most of the key */ + while (length > 3) { + a += k[0]; + b += k[1]; + c += k[2]; + mix(a, b, c); + length -= 3; + k += 3; + } + + /*------------------------------------------- handle the last 3 uint32_t's */ + switch (length) { /* all the case statements fall through */ + case 3: + c += k[2]; + case 2: + b += k[1]; + case 1: + a += k[0]; + final(a, b, c); + case 0: /* case 0: nothing left to add */ + break; + } + /*------------------------------------------------------ report the result */ + return c; +} + + +/* +-------------------------------------------------------------------- +hashword2() -- same as hashword(), but take two seeds and return two +32-bit values. pc and pb must both be nonnull, and *pc and *pb must +both be initialized with seeds. If you pass in (*pb)==0, the output +(*pc) will be the same as the return value from hashword(). +-------------------------------------------------------------------- +*/ +void +hashword2(const uint32_t * k, /* the key, an array of uint32_t values */ + size_t length, /* the length of the key, in uint32_ts */ + uint32_t * pc, /* IN: seed OUT: primary hash value */ + uint32_t * pb) +{ /* IN: more seed OUT: secondary hash value */ + uint32_t a, b, c; + + /* Set up the internal state */ + a = b = c = 0xdeadbeef + ((uint32_t) (length << 2)) + *pc; + c += *pb; + + /*------------------------------------------------- handle most of the key */ + while (length > 3) { + a += k[0]; + b += k[1]; + c += k[2]; + mix(a, b, c); + length -= 3; + k += 3; + } + + /*------------------------------------------- handle the last 3 uint32_t's */ + switch (length) { /* all the case statements fall through */ + case 3: + c += k[2]; + case 2: + b += k[1]; + case 1: + a += k[0]; + final(a, b, c); + case 0: /* case 0: nothing left to add */ + break; + } + /*------------------------------------------------------ report the result */ + *pc = c; + *pb = b; +} + + +/* +------------------------------------------------------------------------------- +hashlittle() -- hash a variable-length key into a 32-bit value + k : the key (the unaligned variable-length array of bytes) + length : the length of the key, counting by bytes + initval : can be any 4-byte value +Returns a 32-bit value. Every bit of the key affects every bit of +the return value. Two keys differing by one or two bits will have +totally different hash values. + +The best hash table sizes are powers of 2. There is no need to do +mod a prime (mod is sooo slow!). If you need less than 32 bits, +use a bitmask. For example, if you need only 10 bits, do + h = (h & hashmask(10)); +In which case, the hash table should have hashsize(10) elements. + +If you are hashing n strings (uint8_t **)k, do it like this: + for (i=0, h=0; i<n; ++i) h = hashlittle( k[i], len[i], h); + +By Bob Jenkins, 2006. bob_jenkins@burtleburtle.net. You may use this +code any way you wish, private, educational, or commercial. It's free. + +Use for hash table lookup, or anything where one collision in 2^^32 is +acceptable. Do NOT use for cryptographic purposes. +------------------------------------------------------------------------------- +*/ + +uint32_t +hashlittle(const void *key, size_t length, uint32_t initval) +{ + uint32_t a, b, c; /* internal state */ + union + { + const void *ptr; + size_t i; + } u; /* needed for Mac Powerbook G4 */ + + /* Set up the internal state */ + a = b = c = 0xdeadbeef + ((uint32_t) length) + initval; + + u.ptr = key; + if (HASH_LITTLE_ENDIAN && ((u.i & 0x3) == 0)) { + const uint32_t *k = (const uint32_t *) key; /* read 32-bit chunks */ +#ifdef VALGRIND + const uint8_t *k8; +#endif + + /*------ all but last block: aligned reads and affect 32 bits of (a,b,c) */ + while (length > 12) { + a += k[0]; + b += k[1]; + c += k[2]; + mix(a, b, c); + length -= 12; + k += 3; + } + + /*----------------------------- handle the last (probably partial) block */ + /* + * "k[2]&0xffffff" actually reads beyond the end of the string, but + * then masks off the part it's not allowed to read. Because the + * string is aligned, the masked-off tail is in the same word as the + * rest of the string. Every machine with memory protection I've seen + * does it on word boundaries, so is OK with this. But VALGRIND will + * still catch it and complain. The masking trick does make the hash + * noticably faster for short strings (like English words). + */ +#ifndef VALGRIND + + switch (length) { + case 12: + c += k[2]; + b += k[1]; + a += k[0]; + break; + case 11: + c += k[2] & 0xffffff; + b += k[1]; + a += k[0]; + break; + case 10: + c += k[2] & 0xffff; + b += k[1]; + a += k[0]; + break; + case 9: + c += k[2] & 0xff; + b += k[1]; + a += k[0]; + break; + case 8: + b += k[1]; + a += k[0]; + break; + case 7: + b += k[1] & 0xffffff; + a += k[0]; + break; + case 6: + b += k[1] & 0xffff; + a += k[0]; + break; + case 5: + b += k[1] & 0xff; + a += k[0]; + break; + case 4: + a += k[0]; + break; + case 3: + a += k[0] & 0xffffff; + break; + case 2: + a += k[0] & 0xffff; + break; + case 1: + a += k[0] & 0xff; + break; + case 0: + return c; /* zero length strings require no mixing */ + } + +#else /* make valgrind happy */ + + k8 = (const uint8_t *) k; + switch (length) { + case 12: + c += k[2]; + b += k[1]; + a += k[0]; + break; + case 11: + c += ((uint32_t) k8[10]) << 16; /* fall through */ + case 10: + c += ((uint32_t) k8[9]) << 8; /* fall through */ + case 9: + c += k8[8]; /* fall through */ + case 8: + b += k[1]; + a += k[0]; + break; + case 7: + b += ((uint32_t) k8[6]) << 16; /* fall through */ + case 6: + b += ((uint32_t) k8[5]) << 8; /* fall through */ + case 5: + b += k8[4]; /* fall through */ + case 4: + a += k[0]; + break; + case 3: + a += ((uint32_t) k8[2]) << 16; /* fall through */ + case 2: + a += ((uint32_t) k8[1]) << 8; /* fall through */ + case 1: + a += k8[0]; + break; + case 0: + return c; + } + +#endif /* !valgrind */ + + } else if (HASH_LITTLE_ENDIAN && ((u.i & 0x1) == 0)) { + const uint16_t *k = (const uint16_t *) key; /* read 16-bit chunks */ + const uint8_t *k8; + + /*--------------- all but last block: aligned reads and different mixing */ + while (length > 12) { + a += k[0] + (((uint32_t) k[1]) << 16); + b += k[2] + (((uint32_t) k[3]) << 16); + c += k[4] + (((uint32_t) k[5]) << 16); + mix(a, b, c); + length -= 12; + k += 6; + } + + /*----------------------------- handle the last (probably partial) block */ + k8 = (const uint8_t *) k; + switch (length) { + case 12: + c += k[4] + (((uint32_t) k[5]) << 16); + b += k[2] + (((uint32_t) k[3]) << 16); + a += k[0] + (((uint32_t) k[1]) << 16); + break; + case 11: + c += ((uint32_t) k8[10]) << 16; /* fall through */ + case 10: + c += k[4]; + b += k[2] + (((uint32_t) k[3]) << 16); + a += k[0] + (((uint32_t) k[1]) << 16); + break; + case 9: + c += k8[8]; /* fall through */ + case 8: + b += k[2] + (((uint32_t) k[3]) << 16); + a += k[0] + (((uint32_t) k[1]) << 16); + break; + case 7: + b += ((uint32_t) k8[6]) << 16; /* fall through */ + case 6: + b += k[2]; + a += k[0] + (((uint32_t) k[1]) << 16); + break; + case 5: + b += k8[4]; /* fall through */ + case 4: + a += k[0] + (((uint32_t) k[1]) << 16); + break; + case 3: + a += ((uint32_t) k8[2]) << 16; /* fall through */ + case 2: + a += k[0]; + break; + case 1: + a += k8[0]; + break; + case 0: + return c; /* zero length requires no mixing */ + } + + } else { /* need to read the key one byte at a time */ + const uint8_t *k = (const uint8_t *) key; + + /*--------------- all but the last block: affect some 32 bits of (a,b,c) */ + while (length > 12) { + a += k[0]; + a += ((uint32_t) k[1]) << 8; + a += ((uint32_t) k[2]) << 16; + a += ((uint32_t) k[3]) << 24; + b += k[4]; + b += ((uint32_t) k[5]) << 8; + b += ((uint32_t) k[6]) << 16; + b += ((uint32_t) k[7]) << 24; + c += k[8]; + c += ((uint32_t) k[9]) << 8; + c += ((uint32_t) k[10]) << 16; + c += ((uint32_t) k[11]) << 24; + mix(a, b, c); + length -= 12; + k += 12; + } + + /*-------------------------------- last block: affect all 32 bits of (c) */ + switch (length) { /* all the case statements fall through */ + case 12: + c += ((uint32_t) k[11]) << 24; + case 11: + c += ((uint32_t) k[10]) << 16; + case 10: + c += ((uint32_t) k[9]) << 8; + case 9: + c += k[8]; + case 8: + b += ((uint32_t) k[7]) << 24; + case 7: + b += ((uint32_t) k[6]) << 16; + case 6: + b += ((uint32_t) k[5]) << 8; + case 5: + b += k[4]; + case 4: + a += ((uint32_t) k[3]) << 24; + case 3: + a += ((uint32_t) k[2]) << 16; + case 2: + a += ((uint32_t) k[1]) << 8; + case 1: + a += k[0]; + break; + case 0: + return c; + } + } + + final(a, b, c); + return c; +} + + +/* + * hashlittle2: return 2 32-bit hash values + * + * This is identical to hashlittle(), except it returns two 32-bit hash + * values instead of just one. This is good enough for hash table + * lookup with 2^^64 buckets, or if you want a second hash if you're not + * happy with the first, or if you want a probably-unique 64-bit ID for + * the key. *pc is better mixed than *pb, so use *pc first. If you want + * a 64-bit value do something like "*pc + (((uint64_t)*pb)<<32)". + */ +void +hashlittle2(const void *key, /* the key to hash */ + size_t length, /* length of the key */ + uint32_t * pc, /* IN: primary initval, OUT: primary hash */ + uint32_t * pb) +{ /* IN: secondary initval, OUT: secondary hash */ + uint32_t a, b, c; /* internal state */ + union + { + const void *ptr; + size_t i; + } u; /* needed for Mac Powerbook G4 */ + + /* Set up the internal state */ + a = b = c = 0xdeadbeef + ((uint32_t) length) + *pc; + c += *pb; + + u.ptr = key; + if (HASH_LITTLE_ENDIAN && ((u.i & 0x3) == 0)) { + const uint32_t *k = (const uint32_t *) key; /* read 32-bit chunks */ +#ifdef VALGRIND + const uint8_t *k8; +#endif + + /*------ all but last block: aligned reads and affect 32 bits of (a,b,c) */ + while (length > 12) { + a += k[0]; + b += k[1]; + c += k[2]; + mix(a, b, c); + length -= 12; + k += 3; + } + + /*----------------------------- handle the last (probably partial) block */ + /* + * "k[2]&0xffffff" actually reads beyond the end of the string, but + * then masks off the part it's not allowed to read. Because the + * string is aligned, the masked-off tail is in the same word as the + * rest of the string. Every machine with memory protection I've seen + * does it on word boundaries, so is OK with this. But VALGRIND will + * still catch it and complain. The masking trick does make the hash + * noticably faster for short strings (like English words). + */ +#ifndef VALGRIND + + switch (length) { + case 12: + c += k[2]; + b += k[1]; + a += k[0]; + break; + case 11: + c += k[2] & 0xffffff; + b += k[1]; + a += k[0]; + break; + case 10: + c += k[2] & 0xffff; + b += k[1]; + a += k[0]; + break; + case 9: + c += k[2] & 0xff; + b += k[1]; + a += k[0]; + break; + case 8: + b += k[1]; + a += k[0]; + break; + case 7: + b += k[1] & 0xffffff; + a += k[0]; + break; + case 6: + b += k[1] & 0xffff; + a += k[0]; + break; + case 5: + b += k[1] & 0xff; + a += k[0]; + break; + case 4: + a += k[0]; + break; + case 3: + a += k[0] & 0xffffff; + break; + case 2: + a += k[0] & 0xffff; + break; + case 1: + a += k[0] & 0xff; + break; + case 0: + *pc = c; + *pb = b; + return; /* zero length strings require no mixing */ + } + +#else /* make valgrind happy */ + + k8 = (const uint8_t *) k; + switch (length) { + case 12: + c += k[2]; + b += k[1]; + a += k[0]; + break; + case 11: + c += ((uint32_t) k8[10]) << 16; /* fall through */ + case 10: + c += ((uint32_t) k8[9]) << 8; /* fall through */ + case 9: + c += k8[8]; /* fall through */ + case 8: + b += k[1]; + a += k[0]; + break; + case 7: + b += ((uint32_t) k8[6]) << 16; /* fall through */ + case 6: + b += ((uint32_t) k8[5]) << 8; /* fall through */ + case 5: + b += k8[4]; /* fall through */ + case 4: + a += k[0]; + break; + case 3: + a += ((uint32_t) k8[2]) << 16; /* fall through */ + case 2: + a += ((uint32_t) k8[1]) << 8; /* fall through */ + case 1: + a += k8[0]; + break; + case 0: + *pc = c; + *pb = b; + return; /* zero length strings require no mixing */ + } + +#endif /* !valgrind */ + + } else if (HASH_LITTLE_ENDIAN && ((u.i & 0x1) == 0)) { + const uint16_t *k = (const uint16_t *) key; /* read 16-bit chunks */ + const uint8_t *k8; + + /*--------------- all but last block: aligned reads and different mixing */ + while (length > 12) { + a += k[0] + (((uint32_t) k[1]) << 16); + b += k[2] + (((uint32_t) k[3]) << 16); + c += k[4] + (((uint32_t) k[5]) << 16); + mix(a, b, c); + length -= 12; + k += 6; + } + + /*----------------------------- handle the last (probably partial) block */ + k8 = (const uint8_t *) k; + switch (length) { + case 12: + c += k[4] + (((uint32_t) k[5]) << 16); + b += k[2] + (((uint32_t) k[3]) << 16); + a += k[0] + (((uint32_t) k[1]) << 16); + break; + case 11: + c += ((uint32_t) k8[10]) << 16; /* fall through */ + case 10: + c += k[4]; + b += k[2] + (((uint32_t) k[3]) << 16); + a += k[0] + (((uint32_t) k[1]) << 16); + break; + case 9: + c += k8[8]; /* fall through */ + case 8: + b += k[2] + (((uint32_t) k[3]) << 16); + a += k[0] + (((uint32_t) k[1]) << 16); + break; + case 7: + b += ((uint32_t) k8[6]) << 16; /* fall through */ + case 6: + b += k[2]; + a += k[0] + (((uint32_t) k[1]) << 16); + break; + case 5: + b += k8[4]; /* fall through */ + case 4: + a += k[0] + (((uint32_t) k[1]) << 16); + break; + case 3: + a += ((uint32_t) k8[2]) << 16; /* fall through */ + case 2: + a += k[0]; + break; + case 1: + a += k8[0]; + break; + case 0: + *pc = c; + *pb = b; + return; /* zero length strings require no mixing */ + } + + } else { /* need to read the key one byte at a time */ + const uint8_t *k = (const uint8_t *) key; + + /*--------------- all but the last block: affect some 32 bits of (a,b,c) */ + while (length > 12) { + a += k[0]; + a += ((uint32_t) k[1]) << 8; + a += ((uint32_t) k[2]) << 16; + a += ((uint32_t) k[3]) << 24; + b += k[4]; + b += ((uint32_t) k[5]) << 8; + b += ((uint32_t) k[6]) << 16; + b += ((uint32_t) k[7]) << 24; + c += k[8]; + c += ((uint32_t) k[9]) << 8; + c += ((uint32_t) k[10]) << 16; + c += ((uint32_t) k[11]) << 24; + mix(a, b, c); + length -= 12; + k += 12; + } + + /*-------------------------------- last block: affect all 32 bits of (c) */ + switch (length) { /* all the case statements fall through */ + case 12: + c += ((uint32_t) k[11]) << 24; + case 11: + c += ((uint32_t) k[10]) << 16; + case 10: + c += ((uint32_t) k[9]) << 8; + case 9: + c += k[8]; + case 8: + b += ((uint32_t) k[7]) << 24; + case 7: + b += ((uint32_t) k[6]) << 16; + case 6: + b += ((uint32_t) k[5]) << 8; + case 5: + b += k[4]; + case 4: + a += ((uint32_t) k[3]) << 24; + case 3: + a += ((uint32_t) k[2]) << 16; + case 2: + a += ((uint32_t) k[1]) << 8; + case 1: + a += k[0]; + break; + case 0: + *pc = c; + *pb = b; + return; /* zero length strings require no mixing */ + } + } + + final(a, b, c); + *pc = c; + *pb = b; +} + + + +/* + * hashbig(): + * This is the same as hashword() on big-endian machines. It is different + * from hashlittle() on all machines. hashbig() takes advantage of + * big-endian byte ordering. + */ +uint32_t +hashbig(const void *key, size_t length, uint32_t initval) +{ + uint32_t a, b, c; + union + { + const void *ptr; + size_t i; + } u; /* to cast key to (size_t) happily */ + + /* Set up the internal state */ + a = b = c = 0xdeadbeef + ((uint32_t) length) + initval; + + u.ptr = key; + if (HASH_BIG_ENDIAN && ((u.i & 0x3) == 0)) { + const uint32_t *k = (const uint32_t *) key; /* read 32-bit chunks */ +#ifdef VALGRIND + const uint8_t *k8; +#endif + + /*------ all but last block: aligned reads and affect 32 bits of (a,b,c) */ + while (length > 12) { + a += k[0]; + b += k[1]; + c += k[2]; + mix(a, b, c); + length -= 12; + k += 3; + } + + /*----------------------------- handle the last (probably partial) block */ + /* + * "k[2]<<8" actually reads beyond the end of the string, but + * then shifts out the part it's not allowed to read. Because the + * string is aligned, the illegal read is in the same word as the + * rest of the string. Every machine with memory protection I've seen + * does it on word boundaries, so is OK with this. But VALGRIND will + * still catch it and complain. The masking trick does make the hash + * noticably faster for short strings (like English words). + */ +#ifndef VALGRIND + + switch (length) { + case 12: + c += k[2]; + b += k[1]; + a += k[0]; + break; + case 11: + c += k[2] & 0xffffff00; + b += k[1]; + a += k[0]; + break; + case 10: + c += k[2] & 0xffff0000; + b += k[1]; + a += k[0]; + break; + case 9: + c += k[2] & 0xff000000; + b += k[1]; + a += k[0]; + break; + case 8: + b += k[1]; + a += k[0]; + break; + case 7: + b += k[1] & 0xffffff00; + a += k[0]; + break; + case 6: + b += k[1] & 0xffff0000; + a += k[0]; + break; + case 5: + b += k[1] & 0xff000000; + a += k[0]; + break; + case 4: + a += k[0]; + break; + case 3: + a += k[0] & 0xffffff00; + break; + case 2: + a += k[0] & 0xffff0000; + break; + case 1: + a += k[0] & 0xff000000; + break; + case 0: + return c; /* zero length strings require no mixing */ + } + +#else /* make valgrind happy */ + + k8 = (const uint8_t *) k; + switch (length) { /* all the case statements fall through */ + case 12: + c += k[2]; + b += k[1]; + a += k[0]; + break; + case 11: + c += ((uint32_t) k8[10]) << 8; /* fall through */ + case 10: + c += ((uint32_t) k8[9]) << 16; /* fall through */ + case 9: + c += ((uint32_t) k8[8]) << 24; /* fall through */ + case 8: + b += k[1]; + a += k[0]; + break; + case 7: + b += ((uint32_t) k8[6]) << 8; /* fall through */ + case 6: + b += ((uint32_t) k8[5]) << 16; /* fall through */ + case 5: + b += ((uint32_t) k8[4]) << 24; /* fall through */ + case 4: + a += k[0]; + break; + case 3: + a += ((uint32_t) k8[2]) << 8; /* fall through */ + case 2: + a += ((uint32_t) k8[1]) << 16; /* fall through */ + case 1: + a += ((uint32_t) k8[0]) << 24; + break; + case 0: + return c; + } + +#endif /* !VALGRIND */ + + } else { /* need to read the key one byte at a time */ + const uint8_t *k = (const uint8_t *) key; + + /*--------------- all but the last block: affect some 32 bits of (a,b,c) */ + while (length > 12) { + a += ((uint32_t) k[0]) << 24; + a += ((uint32_t) k[1]) << 16; + a += ((uint32_t) k[2]) << 8; + a += ((uint32_t) k[3]); + b += ((uint32_t) k[4]) << 24; + b += ((uint32_t) k[5]) << 16; + b += ((uint32_t) k[6]) << 8; + b += ((uint32_t) k[7]); + c += ((uint32_t) k[8]) << 24; + c += ((uint32_t) k[9]) << 16; + c += ((uint32_t) k[10]) << 8; + c += ((uint32_t) k[11]); + mix(a, b, c); + length -= 12; + k += 12; + } + + /*-------------------------------- last block: affect all 32 bits of (c) */ + switch (length) { /* all the case statements fall through */ + case 12: + c += k[11]; + case 11: + c += ((uint32_t) k[10]) << 8; + case 10: + c += ((uint32_t) k[9]) << 16; + case 9: + c += ((uint32_t) k[8]) << 24; + case 8: + b += k[7]; + case 7: + b += ((uint32_t) k[6]) << 8; + case 6: + b += ((uint32_t) k[5]) << 16; + case 5: + b += ((uint32_t) k[4]) << 24; + case 4: + a += k[3]; + case 3: + a += ((uint32_t) k[2]) << 8; + case 2: + a += ((uint32_t) k[1]) << 16; + case 1: + a += ((uint32_t) k[0]) << 24; + break; + case 0: + return c; + } + } + + final(a, b, c); + return c; +} + + +#if SELF_TEST + +/* used for timings */ +void +driver1() +{ + uint8_t buf[256]; + uint32_t i; + uint32_t h = 0; + time_t a, z; + + time(&a); + for (i = 0; i < 256; ++i) + buf[i] = 'x'; + for (i = 0; i < 1; ++i) { + h = hashlittle(&buf[0], 1, h); + } + time(&z); + if (z - a > 0) + printf("time %d %.8x\n", z - a, h); +} + +/* check that every input bit changes every output bit half the time */ +#define HASHSTATE 1 +#define HASHLEN 1 +#define MAXPAIR 60 +#define MAXLEN 70 +void +driver2() +{ + uint8_t qa[MAXLEN + 1], qb[MAXLEN + 2], *a = &qa[0], *b = &qb[1]; + uint32_t c[HASHSTATE], d[HASHSTATE], i = 0, j = 0, k, l, m = 0, z; + uint32_t e[HASHSTATE], f[HASHSTATE], g[HASHSTATE], h[HASHSTATE]; + uint32_t x[HASHSTATE], y[HASHSTATE]; + uint32_t hlen; + + printf("No more than %d trials should ever be needed \n", MAXPAIR / 2); + for (hlen = 0; hlen < MAXLEN; ++hlen) { + z = 0; + for (i = 0; i < hlen; ++i) { +/*----------------------- for each input byte, */ + for (j = 0; j < 8; ++j) { +/*------------------------ for each input bit, */ + for (m = 1; m < 8; ++m) { +/*------------ for serveral possible initvals, */ + for (l = 0; l < HASHSTATE; ++l) + e[l] = f[l] = g[l] = h[l] = x[l] = y[l] = ~((uint32_t) 0); + + /*---- check that every output bit is affected by that input bit */ + for (k = 0; k < MAXPAIR; k += 2) { + uint32_t finished = 1; + /* keys have one bit different */ + for (l = 0; l < hlen + 1; ++l) { + a[l] = b[l] = (uint8_t) 0; + } + /* have a and b be two keys differing in only one bit */ + a[i] ^= (k << j); + a[i] ^= (k >> (8 - j)); + c[0] = hashlittle(a, hlen, m); + b[i] ^= ((k + 1) << j); + b[i] ^= ((k + 1) >> (8 - j)); + d[0] = hashlittle(b, hlen, m); + /* check every bit is 1, 0, set, and not set at least once */ + for (l = 0; l < HASHSTATE; ++l) { + e[l] &= (c[l] ^ d[l]); + f[l] &= ~(c[l] ^ d[l]); + g[l] &= c[l]; + h[l] &= ~c[l]; + x[l] &= d[l]; + y[l] &= ~d[l]; + if (e[l] | f[l] | g[l] | h[l] | x[l] | y[l]) + finished = 0; + } + if (finished) + break; + } + if (k > z) + z = k; + if (k == MAXPAIR) { + printf("Some bit didn't change: "); + printf("%.8x %.8x %.8x %.8x %.8x %.8x ", e[0], f[0], g[0], h[0], x[0], y[0]); + printf("i %d j %d m %d len %d\n", i, j, m, hlen); + } + if (z == MAXPAIR) + goto done; + } + } + } + done: + if (z < MAXPAIR) { + printf("Mix success %2d bytes %2d initvals ", i, m); + printf("required %d trials\n", z / 2); + } + } + printf("\n"); +} + +/* Check for reading beyond the end of the buffer and alignment problems */ +void +driver3() +{ + uint8_t buf[MAXLEN + 20], *b; + uint32_t len; + uint8_t q[] = "This is the time for all good men to come to the aid of their country..."; + uint32_t h; + uint8_t qq[] = "xThis is the time for all good men to come to the aid of their country..."; + uint32_t i; + uint8_t qqq[] = "xxThis is the time for all good men to come to the aid of their country..."; + uint32_t j; + uint8_t qqqq[] = "xxxThis is the time for all good men to come to the aid of their country..."; + uint32_t ref, x, y; + uint8_t *p; + + printf("Endianness. These lines should all be the same (for values filled in):\n"); + printf("%.8x %.8x %.8x\n", + hashword((const uint32_t *) q, (sizeof(q) - 1) / 4, 13), + hashword((const uint32_t *) q, (sizeof(q) - 5) / 4, 13), + hashword((const uint32_t *) q, (sizeof(q) - 9) / 4, 13)); + p = q; + printf("%.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x\n", + hashlittle(p, sizeof(q) - 1, 13), hashlittle(p, sizeof(q) - 2, 13), + hashlittle(p, sizeof(q) - 3, 13), hashlittle(p, sizeof(q) - 4, 13), + hashlittle(p, sizeof(q) - 5, 13), hashlittle(p, sizeof(q) - 6, 13), + hashlittle(p, sizeof(q) - 7, 13), hashlittle(p, sizeof(q) - 8, 13), + hashlittle(p, sizeof(q) - 9, 13), hashlittle(p, sizeof(q) - 10, 13), + hashlittle(p, sizeof(q) - 11, 13), hashlittle(p, sizeof(q) - 12, 13)); + p = &qq[1]; + printf("%.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x\n", + hashlittle(p, sizeof(q) - 1, 13), hashlittle(p, sizeof(q) - 2, 13), + hashlittle(p, sizeof(q) - 3, 13), hashlittle(p, sizeof(q) - 4, 13), + hashlittle(p, sizeof(q) - 5, 13), hashlittle(p, sizeof(q) - 6, 13), + hashlittle(p, sizeof(q) - 7, 13), hashlittle(p, sizeof(q) - 8, 13), + hashlittle(p, sizeof(q) - 9, 13), hashlittle(p, sizeof(q) - 10, 13), + hashlittle(p, sizeof(q) - 11, 13), hashlittle(p, sizeof(q) - 12, 13)); + p = &qqq[2]; + printf("%.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x\n", + hashlittle(p, sizeof(q) - 1, 13), hashlittle(p, sizeof(q) - 2, 13), + hashlittle(p, sizeof(q) - 3, 13), hashlittle(p, sizeof(q) - 4, 13), + hashlittle(p, sizeof(q) - 5, 13), hashlittle(p, sizeof(q) - 6, 13), + hashlittle(p, sizeof(q) - 7, 13), hashlittle(p, sizeof(q) - 8, 13), + hashlittle(p, sizeof(q) - 9, 13), hashlittle(p, sizeof(q) - 10, 13), + hashlittle(p, sizeof(q) - 11, 13), hashlittle(p, sizeof(q) - 12, 13)); + p = &qqqq[3]; + printf("%.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x %.8x\n", + hashlittle(p, sizeof(q) - 1, 13), hashlittle(p, sizeof(q) - 2, 13), + hashlittle(p, sizeof(q) - 3, 13), hashlittle(p, sizeof(q) - 4, 13), + hashlittle(p, sizeof(q) - 5, 13), hashlittle(p, sizeof(q) - 6, 13), + hashlittle(p, sizeof(q) - 7, 13), hashlittle(p, sizeof(q) - 8, 13), + hashlittle(p, sizeof(q) - 9, 13), hashlittle(p, sizeof(q) - 10, 13), + hashlittle(p, sizeof(q) - 11, 13), hashlittle(p, sizeof(q) - 12, 13)); + printf("\n"); + + /* check that hashlittle2 and hashlittle produce the same results */ + i = 47; + j = 0; + hashlittle2(q, sizeof(q), &i, &j); + if (hashlittle(q, sizeof(q), 47) != i) + printf("hashlittle2 and hashlittle mismatch\n"); + + /* check that hashword2 and hashword produce the same results */ + len = 0xdeadbeef; + i = 47, j = 0; + hashword2(&len, 1, &i, &j); + if (hashword(&len, 1, 47) != i) + printf("hashword2 and hashword mismatch %x %x\n", i, hashword(&len, 1, 47)); + + /* check hashlittle doesn't read before or after the ends of the string */ + for (h = 0, b = buf + 1; h < 8; ++h, ++b) { + for (i = 0; i < MAXLEN; ++i) { + len = i; + for (j = 0; j < i; ++j) + *(b + j) = 0; + + /* these should all be equal */ + ref = hashlittle(b, len, (uint32_t) 1); + *(b + i) = (uint8_t) ~ 0; + *(b - 1) = (uint8_t) ~ 0; + x = hashlittle(b, len, (uint32_t) 1); + y = hashlittle(b, len, (uint32_t) 1); + if ((ref != x) || (ref != y)) { + printf("alignment error: %.8x %.8x %.8x %d %d\n", ref, x, y, h, i); + } + } + } +} + +/* check for problems with nulls */ +void +driver4() +{ + uint8_t buf[1]; + uint32_t h, i, state[HASHSTATE]; + + + buf[0] = ~0; + for (i = 0; i < HASHSTATE; ++i) + state[i] = 1; + printf("These should all be different\n"); + for (i = 0, h = 0; i < 8; ++i) { + h = hashlittle(buf, 0, h); + printf("%2d 0-byte strings, hash is %.8x\n", i, h); + } +} + + +int +main() +{ + driver1(); /* test that the key is hashed: used for timings */ + driver2(); /* test that whole key is hashed thoroughly */ + driver3(); /* test that nothing but the key is hashed */ + driver4(); /* test hashing multiple buffers (all buffers are null) */ + return 1; +} + +#endif /* SELF_TEST */ diff --git a/src/hashtbl.h b/src/hashtbl.h index 6243b09..d049ca5 100644 --- a/src/hashtbl.h +++ b/src/hashtbl.h @@ -67,4 +67,13 @@ void hash_remove(const void* key, hashtbl* tbl); void hash_free(hashtbl* tbl); void hash_destroy(hashtbl* tbl); +/* + * found in lookup3.c + */ +#include <stddef.h> +#include <stdint.h> +extern uint32_t hashlittle(const void* key, size_t length, uint32_t initval); +extern uint32_t hashbig(const void* key, size_t length, uint32_t initval); +extern uint32_t hashword(const uint32_t* k, size_t length, uint32_t initval); + #endif // __dnscap_hashtbl_h diff --git a/src/iaddr.c b/src/iaddr.c index 43f0b8f..bbe47be 100644 --- a/src/iaddr.c +++ b/src/iaddr.c @@ -66,3 +66,16 @@ int ia_equal(iaddr x, iaddr y) } return FALSE; } + +int ia_equalp(iaddr* x, iaddr* y) +{ + if (x->af != y->af) + return FALSE; + switch (x->af) { + case AF_INET: + return (x->u.a4.s_addr == y->u.a4.s_addr); + case AF_INET6: + return (memcmp(&x->u.a6.s6_addr, &y->u.a6.s6_addr, sizeof(x->u.a6.s6_addr)) == 0); + } + return FALSE; +} diff --git a/src/iaddr.h b/src/iaddr.h index ea27049..452ca14 100644 --- a/src/iaddr.h +++ b/src/iaddr.h @@ -39,5 +39,6 @@ const char* ia_str(iaddr ia); int ia_equal(iaddr x, iaddr y); +int ia_equalp(iaddr* x, iaddr* y); #endif /* __dnscap_iaddr_h */ diff --git a/src/network.c b/src/network.c index 6dc3dfc..9fc1f00 100644 --- a/src/network.c +++ b/src/network.c @@ -517,7 +517,7 @@ _match_rr(const ldns_rr_list* rrs, char** reason, int* negmatch, int* match, ldn /* Look at each RR in the section (or each QNAME in the question section). */ myregex_ptr myregex; - size_t i, n; + size_t i, n; for (i = 0, n = ldns_rr_list_rr_count(rrs); i < n; i++) { ldns_rr* rr = ldns_rr_list_rr(rrs, i); if (!rr) { @@ -536,7 +536,7 @@ _match_rr(const ldns_rr_list* rrs, char** reason, int* negmatch, int* match, ldn myregex = NEXT(myregex, link)) { if (regexec(&myregex->reg, (char*)ldns_buffer_begin(buf), 0, NULL, 0) == 0) { - if (myregex->not) + if (myregex->not ) (*negmatch)++; else (*match)++; @@ -571,7 +571,7 @@ _filter_by_qname(const ldns_pkt* lpkt, char** reason) */ myregex_ptr myregex; for (myregex = HEAD(myregexes); myregex != NULL; myregex = NEXT(myregex, link)) { - if (myregex->not) { + if (myregex->not ) { negmatch = 0; } else { match = 0; @@ -609,15 +609,15 @@ _filter_by_qname(const ldns_pkt* lpkt, char** reason) void network_pkt2(const char* descr, my_bpftimeval ts, const pcap_thread_packet_t* packet, const u_char* payload, size_t length) { - u_char pkt_copy[SNAPLEN], *pkt = pkt_copy; - const u_char* dnspkt = 0; - unsigned proto, sport, dport; - iaddr from, to, initiator, responder; - int response, m; - unsigned flags = DNSCAP_OUTPUT_ISLAYER; - tcpstate_ptr tcpstate = NULL; - size_t len, dnslen = 0; - HEADER dns; + u_char pkt_copy[SNAPLEN], *pkt = pkt_copy; + u_char* dnspkt = 0; + unsigned proto, sport, dport; + iaddr from, to, initiator, responder; + int response, m; + unsigned flags = DNSCAP_OUTPUT_ISLAYER; + tcpstate_ptr tcpstate = NULL; + size_t len, dnslen = 0; + HEADER dns; /* Make a writable copy of the packet and use that copy from now on. */ if (length > SNAPLEN) @@ -664,8 +664,8 @@ void network_pkt2(const char* descr, my_bpftimeval ts, const pcap_thread_packet_ proto = IPPROTO_UDP; sport = packet->udphdr.uh_sport; dport = packet->udphdr.uh_dport; - dnspkt = payload; - dnslen = length; + dnspkt = pkt; + dnslen = len; flags |= DNSCAP_OUTPUT_ISDNS; } else if (packet->have_tcphdr) { uint32_t seq = packet->tcphdr.th_seq; @@ -730,14 +730,7 @@ void network_pkt2(const char* descr, my_bpftimeval ts, const pcap_thread_packet_ _curr_tcpstate = 0; /* End of stream; deallocate the tcpstate. */ - if (tcpstate) { - UNLINK(tcpstates, tcpstate, link); - if (tcpstate->reasm) { - tcpreasm_free(tcpstate->reasm); - } - free(tcpstate); - tcpstate_count--; - } + tcpstate_free(tcpstate); return; } if (packet->tcphdr.th_flags & TH_SYN) { @@ -1084,7 +1077,7 @@ void network_pkt(const char* descr, my_bpftimeval ts, unsigned pf, const u_char* opkt, size_t olen) { u_char pkt_copy[SNAPLEN], *pkt = pkt_copy; - const u_char* dnspkt = 0; + u_char* dnspkt = 0; unsigned proto, sport, dport; iaddr from, to, initiator, responder; struct ip6_hdr* ipv6; @@ -1314,14 +1307,7 @@ void network_pkt(const char* descr, my_bpftimeval ts, unsigned pf, pkt_copy, olen, NULL, 0); _curr_tcpstate = 0; /* End of stream; deallocate the tcpstate. */ - if (tcpstate) { - UNLINK(tcpstates, tcpstate, link); - if (tcpstate->reasm) { - tcpreasm_free(tcpstate->reasm); - } - free(tcpstate); - tcpstate_count--; - } + tcpstate_free(tcpstate); goto network_pkt_end; } if (tcp->th_flags & TH_SYN) { @@ -1448,8 +1434,8 @@ void network_pkt(const char* descr, my_bpftimeval ts, unsigned pf, tcpstate->lastdns = seq + tcpstate->dnslen; } else if (seqdiff == 0 && len > 2) { /* This is the first segment of the stream, and - * contains the dnslen and dns header, so we can - * filter on it. */ + * contains the dnslen and dns header, so we can + * filter on it. */ if (dumptrace >= 3) fprintf(stderr, "len+hdr\n"); dnslen = tcpstate->dnslen = (pkt[0] << 8) | (pkt[1] << 0); @@ -1461,7 +1447,7 @@ void network_pkt(const char* descr, my_bpftimeval ts, unsigned pf, tcpstate->lastdns = seq + 2 + tcpstate->dnslen; } else if (seqdiff == 0 && len == 2) { /* This is the first segment of the stream, but only - * contains the dnslen. */ + * contains the dnslen. */ if (dumptrace >= 3) fprintf(stderr, "len\n"); tcpstate->dnslen = (pkt[0] << 8) | (pkt[1] << 0); @@ -1478,7 +1464,7 @@ void network_pkt(const char* descr, my_bpftimeval ts, unsigned pf, goto network_pkt_end; } else if (seqdiff == 2) { /* This is not the first segment, but it does contain - * the first dns header, so we can filter on it. */ + * the first dns header, so we can filter on it. */ if (dumptrace >= 3) fprintf(stderr, "hdr\n"); tcpstate->maxdiff = seqdiff + (uint32_t)len; diff --git a/src/tcpreasm.c b/src/tcpreasm.c index e3df539..7dc82fa 100644 --- a/src/tcpreasm.c +++ b/src/tcpreasm.c @@ -104,7 +104,7 @@ static int dns_protocol_handler(tcpreasm_t* t, u_char* segment, uint16_t dnslen, } t->bfb_buf[t->bfb_at++] = dnslen >> 8; - t->bfb_buf[t->bfb_at++] = dnslen & 0xff; //NOSONAR + t->bfb_buf[t->bfb_at++] = dnslen & 0xff; // NOSONAR memcpy(&t->bfb_buf[t->bfb_at], segment, dnslen); t->bfb_at += dnslen; t->seq_bfb += 2 + dnslen; diff --git a/src/tcpstate.c b/src/tcpstate.c index 5bc3840..b11c701 100644 --- a/src/tcpstate.c +++ b/src/tcpstate.c @@ -38,11 +38,18 @@ #include "iaddr.h" #include "log.h" #include "tcpreasm.h" +#include "hashtbl.h" + +#ifndef s6_addr32 +#define s6_addr32 __u6_addr.__u6_addr32 +#endif #define MAX_TCP_IDLE_TIME 600 #define MAX_TCP_IDLE_COUNT 4096 #define TCP_GC_TIME 60 +static hashtbl* _hash = 0; + tcpstate_ptr tcpstate_find(iaddr from, iaddr to, unsigned sport, unsigned dport, time_t t) { static time_t next_gc = 0; @@ -59,12 +66,15 @@ tcpstate_ptr tcpstate_find(iaddr from, iaddr to, unsigned sport, unsigned dport, } #endif - for (tcpstate = HEAD(tcpstates); - tcpstate != NULL; - tcpstate = NEXT(tcpstate, link)) { - if (ia_equal(tcpstate->saddr, from) && ia_equal(tcpstate->daddr, to) && tcpstate->sport == sport && tcpstate->dport == dport) - break; - } + tcpstate_key key = { + .saddr = &from, + .daddr = &to, + .sport = sport, + .dport = dport + }; + + tcpstate = hash_find(&key, _hash); + if (tcpstate != NULL) { tcpstate->last_use = t; if (tcpstate != HEAD(tcpstates)) { @@ -77,10 +87,47 @@ tcpstate_ptr tcpstate_find(iaddr from, iaddr to, unsigned sport, unsigned dport, return tcpstate; } +unsigned int tcpstate_hash(const tcpstate_key* key) +{ + uint32_t h = 0; + + switch (key->saddr->af) { + case AF_INET: + h = hashword(&key->saddr->u.a4.s_addr, 1, h); + break; + case AF_INET6: + h = hashword(key->saddr->u.a6.s6_addr32, 4, h); + break; + } + + switch (key->daddr->af) { + case AF_INET: + h = hashword(&key->daddr->u.a4.s_addr, 1, h); + break; + case AF_INET6: + h = hashword(key->daddr->u.a6.s6_addr32, 4, h); + break; + } + + uint32_t p = (key->sport << 16) | (key->dport & 0xffff); + return hashword(&p, 1, h); +} + +int tcpstate_cmp(const tcpstate_key* a, const tcpstate_key* b) +{ + if (ia_equalp(a->saddr, b->saddr) && ia_equalp(a->daddr, b->daddr) && a->sport == b->sport && a->dport == b->dport) + return 0; + return 1; +} + tcpstate_ptr _curr_tcpstate = 0; tcpstate_ptr tcpstate_new(iaddr from, iaddr to, unsigned sport, unsigned dport) { + if (!_hash) { + _hash = hash_create(65535, (hashkey_func)tcpstate_hash, (hashkeycmp_func)tcpstate_cmp, 0); + assert(_hash); + } tcpstate_ptr tcpstate = calloc(1, sizeof *tcpstate); if (tcpstate == NULL) { /* Out of memory; recycle the least recently used */ @@ -95,6 +142,7 @@ tcpstate_ptr tcpstate_new(iaddr from, iaddr to, unsigned sport, unsigned dport) if (_curr_tcpstate == tcpstate) { _curr_tcpstate = 0; } + hash_remove(&tcpstate->key, _hash); memset(tcpstate, 0, sizeof(*tcpstate)); } else { tcpstate_count++; @@ -105,6 +153,13 @@ tcpstate_ptr tcpstate_new(iaddr from, iaddr to, unsigned sport, unsigned dport) tcpstate->dport = dport; INIT_LINK(tcpstate, link); PREPEND(tcpstates, tcpstate, link); + + tcpstate->key.saddr = &tcpstate->saddr; + tcpstate->key.daddr = &tcpstate->daddr; + tcpstate->key.sport = sport; + tcpstate->key.dport = dport; + hash_add(&tcpstate->key, tcpstate, _hash); + return tcpstate; } @@ -124,6 +179,7 @@ void tcpstate_discard(tcpstate_ptr tcpstate, const char* msg) if (tcpstate->reasm) { tcpreasm_free(tcpstate->reasm); } + hash_remove(&tcpstate->key, _hash); free(tcpstate); if (_curr_tcpstate == tcpstate) { _curr_tcpstate = 0; @@ -149,3 +205,19 @@ void tcpstate_reset(tcpstate_ptr tcpstate, const char* msg) } } } + +void tcpstate_free(tcpstate_ptr tcpstate) +{ + if (tcpstate) { + UNLINK(tcpstates, tcpstate, link); + if (tcpstate->reasm) { + tcpreasm_free(tcpstate->reasm); + } + hash_remove(&tcpstate->key, _hash); + free(tcpstate); + if (_curr_tcpstate == tcpstate) { + _curr_tcpstate = 0; + } + tcpstate_count--; + } +}
\ No newline at end of file diff --git a/src/tcpstate.h b/src/tcpstate.h index 1191f9d..2f77ddb 100644 --- a/src/tcpstate.h +++ b/src/tcpstate.h @@ -42,5 +42,6 @@ tcpstate_ptr tcpstate_new(iaddr from, iaddr to, unsigned sport, unsigned dport); void tcpstate_discard(tcpstate_ptr tcpstate, const char* msg); tcpstate_ptr tcpstate_getcurr(void); void tcpstate_reset(tcpstate_ptr tcpstate, const char* msg); +void tcpstate_free(tcpstate_ptr tcpstate); #endif /* __dnscap_tcpstate_h */ diff --git a/src/test/Makefile.am b/src/test/Makefile.am index 85611fb..1918400 100644 --- a/src/test/Makefile.am +++ b/src/test/Makefile.am @@ -1,10 +1,9 @@ MAINTAINERCLEANFILES = $(srcdir)/Makefile.in CLEANFILES = test*.log test*.trs \ - *.pcap-dist \ dns.out \ no-layers.out layers.out \ - frags.out \ + frags.out frags.gold \ padding-no-layers.out padding-layers.out \ vlan11.out \ dnspad.out \ @@ -16,46 +15,12 @@ CLEANFILES = test*.log test*.trs \ test12.out test12.20161020.152301.075993.gz \ test13.out \ test14.out \ - test_regex_match.out + test_regex_match.out \ + edns.out TESTS = test1.sh test2.sh test3.sh test4.sh test5.sh test6.sh test7.sh \ test8.sh test9.sh test10.sh test11.sh test12.sh test13.sh test14.sh \ - test_regex_match.sh - -test1.sh: dns.pcap-dist - -test2.sh: dns.pcap-dist - -test3.sh: frags.pcap-dist - -test4.sh: 1qtcppadd.pcap-dist - -test5.sh: vlan11.pcap-dist - -test6.sh: dnspad.pcap-dist - -test7.sh: 1qtcpnosyn.pcap-dist dnso1tcp.pcap-dist \ - do1t-nosyn-1nolen.pcap-dist dnso1tcp-midmiss.pcap-dist - -test8.sh: dnsotcp-many1pkt.pcap-dist dnsotcp-manyopkts.pcap-dist \ - dnso1tcp-bighole.pcap-dist - -test9.sh: dns.pcap-dist - -test10.sh: dns6.pcap-dist - -test11.sh: dns.pcap-dist - -test12.sh: dns.pcap-dist - -test13.sh: dns.pcap-dist - -test14.sh: dns.pcap-dist - -test_regex_match.sh: dns.pcap-dist - -.pcap.pcap-dist: - cp "$<" "$@" + test_regex_match.sh test_edns.sh EXTRA_DIST = $(TESTS) \ dns.gold dns.pcap \ @@ -70,4 +35,5 @@ EXTRA_DIST = $(TESTS) \ test9.gold \ dns6.pcap test10.gold \ test14.gold \ - test_regex_match.gold + test_regex_match.gold \ + edns.pcap edns.gold diff --git a/src/test/Makefile.in b/src/test/Makefile.in index 10676e0..1aff4ee 100644 --- a/src/test/Makefile.in +++ b/src/test/Makefile.in @@ -1,7 +1,7 @@ -# Makefile.in generated by automake 1.16.1 from Makefile.am. +# Makefile.in generated by automake 1.16.5 from Makefile.am. # @configure_input@ -# Copyright (C) 1994-2018 Free Software Foundation, Inc. +# Copyright (C) 1994-2021 Free Software Foundation, Inc. # This Makefile.in is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, @@ -308,6 +308,7 @@ am__set_TESTS_bases = \ bases='$(TEST_LOGS)'; \ bases=`for i in $$bases; do echo $$i; done | sed 's/\.log$$//'`; \ bases=`echo $$bases` +AM_TESTSUITE_SUMMARY_HEADER = ' for $(PACKAGE_STRING)' RECHECK_LOGS = $(TEST_LOGS) AM_RECURSIVE_TARGETS = check recheck TEST_SUITE_LOG = test-suite.log @@ -345,6 +346,8 @@ CCDEPMODE = @CCDEPMODE@ CFLAGS = @CFLAGS@ CPP = @CPP@ CPPFLAGS = @CPPFLAGS@ +CSCOPE = @CSCOPE@ +CTAGS = @CTAGS@ CYGPATH_W = @CYGPATH_W@ DEFS = @DEFS@ DEPDIR = @DEPDIR@ @@ -355,6 +358,7 @@ ECHO_C = @ECHO_C@ ECHO_N = @ECHO_N@ ECHO_T = @ECHO_T@ EGREP = @EGREP@ +ETAGS = @ETAGS@ EXEEXT = @EXEEXT@ FGREP = @FGREP@ GREP = @GREP@ @@ -462,10 +466,9 @@ top_builddir = @top_builddir@ top_srcdir = @top_srcdir@ MAINTAINERCLEANFILES = $(srcdir)/Makefile.in CLEANFILES = test*.log test*.trs \ - *.pcap-dist \ dns.out \ no-layers.out layers.out \ - frags.out \ + frags.out frags.gold \ padding-no-layers.out padding-layers.out \ vlan11.out \ dnspad.out \ @@ -477,11 +480,12 @@ CLEANFILES = test*.log test*.trs \ test12.out test12.20161020.152301.075993.gz \ test13.out \ test14.out \ - test_regex_match.out + test_regex_match.out \ + edns.out TESTS = test1.sh test2.sh test3.sh test4.sh test5.sh test6.sh test7.sh \ test8.sh test9.sh test10.sh test11.sh test12.sh test13.sh test14.sh \ - test_regex_match.sh + test_regex_match.sh test_edns.sh EXTRA_DIST = $(TESTS) \ dns.gold dns.pcap \ @@ -496,12 +500,13 @@ EXTRA_DIST = $(TESTS) \ test9.gold \ dns6.pcap test10.gold \ test14.gold \ - test_regex_match.gold + test_regex_match.gold \ + edns.pcap edns.gold all: all-am .SUFFIXES: -.SUFFIXES: .log .pcap .pcap-dist .test .test$(EXEEXT) .trs +.SUFFIXES: .log .test .test$(EXEEXT) .trs $(srcdir)/Makefile.in: $(srcdir)/Makefile.am $(am__configure_deps) @for dep in $?; do \ case '$(am__configure_deps)' in \ @@ -652,7 +657,7 @@ $(TEST_SUITE_LOG): $(TEST_LOGS) test x"$$VERBOSE" = x || cat $(TEST_SUITE_LOG); \ fi; \ echo "$${col}$$br$${std}"; \ - echo "$${col}Testsuite summary for $(PACKAGE_STRING)$${std}"; \ + echo "$${col}Testsuite summary"$(AM_TESTSUITE_SUMMARY_HEADER)"$${std}"; \ echo "$${col}$$br$${std}"; \ create_testsuite_report --maybe-color; \ echo "$$col$$br$$std"; \ @@ -791,6 +796,13 @@ test_regex_match.sh.log: test_regex_match.sh --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) +test_edns.sh.log: test_edns.sh + @p='test_edns.sh'; \ + b='test_edns.sh'; \ + $(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \ + --log-file $$b.log --trs-file $$b.trs \ + $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \ + "$$tst" $(AM_TESTS_FD_REDIRECT) .test.log: @p='$<'; \ $(am__set_b); \ @@ -805,7 +817,6 @@ test_regex_match.sh.log: test_regex_match.sh @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_TEST_LOG_DRIVER_FLAGS) $(TEST_LOG_DRIVER_FLAGS) -- $(TEST_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) - distdir: $(BUILT_SOURCES) $(MAKE) $(AM_MAKEFLAGS) distdir-am @@ -967,41 +978,6 @@ uninstall-am: .PRECIOUS: Makefile -test1.sh: dns.pcap-dist - -test2.sh: dns.pcap-dist - -test3.sh: frags.pcap-dist - -test4.sh: 1qtcppadd.pcap-dist - -test5.sh: vlan11.pcap-dist - -test6.sh: dnspad.pcap-dist - -test7.sh: 1qtcpnosyn.pcap-dist dnso1tcp.pcap-dist \ - do1t-nosyn-1nolen.pcap-dist dnso1tcp-midmiss.pcap-dist - -test8.sh: dnsotcp-many1pkt.pcap-dist dnsotcp-manyopkts.pcap-dist \ - dnso1tcp-bighole.pcap-dist - -test9.sh: dns.pcap-dist - -test10.sh: dns6.pcap-dist - -test11.sh: dns.pcap-dist - -test12.sh: dns.pcap-dist - -test13.sh: dns.pcap-dist - -test14.sh: dns.pcap-dist - -test_regex_match.sh: dns.pcap-dist - -.pcap.pcap-dist: - cp "$<" "$@" - # Tell versions [3.59,3.63) of GNU make to not export all variables. # Otherwise a system limit (for SysV at least) may be exceeded. .NOEXPORT: diff --git a/src/test/dns.gold b/src/test/dns.gold index b1cdd8f..170f2c3 100644 --- a/src/test/dns.gold +++ b/src/test/dns.gold @@ -1,8 +1,8 @@ -[56] 2016-10-20 15:23:01.075993 [#0 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:01.075993 [#0 dns.pcap 4095] \ [172.17.0.10].53199 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:01.077982 [#1 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:01.077982 [#1 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53199 \ dns QUERY,NOERROR,59311,qr|rd|ra \ 1 google.com.,IN,A \ @@ -15,11 +15,11 @@ ns1.google.com.,IN,A,331882,216.239.32.10 \ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 -[73] 2016-10-20 15:23:01.082865 [#2 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:01.082865 [#2 dns.pcap 4095] \ [172.17.0.10].57822 [8.8.8.8].53 \ dns QUERY,NOERROR,35665,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:01.084107 [#3 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:01.084107 [#3 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].57822 \ dns QUERY,NOERROR,35665,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -33,11 +33,11 @@ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 \ ns2.google.com.,IN,A,157880,216.239.34.10 -[56] 2016-10-20 15:23:01.087291 [#4 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:01.087291 [#4 dns.pcap 4095] \ [172.17.0.10].40043 [8.8.8.8].53 \ dns QUERY,NOERROR,5337,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:01.088733 [#5 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:01.088733 [#5 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40043 \ dns QUERY,NOERROR,5337,qr|rd|ra \ 1 google.com.,IN,A \ @@ -50,11 +50,11 @@ ns1.google.com.,IN,A,331882,216.239.32.10 \ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 -[56] 2016-10-20 15:23:10.322117 [#6 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:10.322117 [#6 dns.pcap 4095] \ [172.17.0.10].37953 [8.8.8.8].53 \ dns QUERY,NOERROR,22982,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:10.323399 [#7 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:10.323399 [#7 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37953 \ dns QUERY,NOERROR,22982,qr|rd|ra \ 1 google.com.,IN,A \ @@ -67,11 +67,11 @@ ns1.google.com.,IN,A,331872,216.239.32.10 \ ns3.google.com.,IN,A,157870,216.239.36.10 \ ns4.google.com.,IN,A,157870,216.239.38.10 -[73] 2016-10-20 15:23:10.328324 [#8 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:10.328324 [#8 dns.pcap 4095] \ [172.17.0.10].48658 [8.8.8.8].53 \ dns QUERY,NOERROR,18718,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:10.329572 [#9 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:10.329572 [#9 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].48658 \ dns QUERY,NOERROR,18718,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -85,11 +85,11 @@ ns3.google.com.,IN,A,157870,216.239.36.10 \ ns4.google.com.,IN,A,157870,216.239.38.10 \ ns2.google.com.,IN,A,157870,216.239.34.10 -[56] 2016-10-20 15:23:52.860937 [#10 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:52.860937 [#10 dns.pcap 4095] \ [172.17.0.10].40953 [8.8.8.8].53 \ dns QUERY,NOERROR,22531,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:52.863771 [#11 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:52.863771 [#11 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40953 \ dns QUERY,NOERROR,22531,qr|rd|ra \ 1 google.com.,IN,A \ @@ -102,11 +102,11 @@ ns1.google.com.,IN,A,331830,216.239.32.10 \ ns3.google.com.,IN,A,157828,216.239.36.10 \ ns4.google.com.,IN,A,157828,216.239.38.10 -[56] 2016-10-20 15:23:59.083869 [#12 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:59.083869 [#12 dns.pcap 4095] \ [172.17.0.10].45174 [8.8.8.8].53 \ dns QUERY,NOERROR,58510,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:59.086104 [#13 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:59.086104 [#13 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45174 \ dns QUERY,NOERROR,58510,qr|rd|ra \ 1 google.com.,IN,A \ @@ -119,11 +119,11 @@ ns1.google.com.,IN,A,331824,216.239.32.10 \ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 -[73] 2016-10-20 15:23:59.090911 [#14 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:59.090911 [#14 dns.pcap 4095] \ [172.17.0.10].33916 [8.8.8.8].53 \ dns QUERY,NOERROR,45248,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:59.092204 [#15 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:59.092204 [#15 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].33916 \ dns QUERY,NOERROR,45248,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -137,11 +137,11 @@ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 \ ns2.google.com.,IN,A,157822,216.239.34.10 -[56] 2016-10-20 15:24:04.323868 [#16 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:04.323868 [#16 dns.pcap 4095] \ [172.17.0.10].43559 [8.8.8.8].53 \ dns QUERY,NOERROR,49483,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:04.325597 [#17 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:04.325597 [#17 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].43559 \ dns QUERY,NOERROR,49483,qr|rd|ra \ 1 google.com.,IN,A \ @@ -154,11 +154,11 @@ ns1.google.com.,IN,A,331818,216.239.32.10 \ ns3.google.com.,IN,A,157816,216.239.36.10 \ ns4.google.com.,IN,A,157816,216.239.38.10 -[56] 2016-10-20 15:24:06.332239 [#18 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:06.332239 [#18 dns.pcap 4095] \ [172.17.0.10].54859 [8.8.8.8].53 \ dns QUERY,NOERROR,31669,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:06.333743 [#19 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:06.333743 [#19 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].54859 \ dns QUERY,NOERROR,31669,qr|rd|ra \ 1 google.com.,IN,A \ @@ -171,11 +171,11 @@ ns1.google.com.,IN,A,331816,216.239.32.10 \ ns3.google.com.,IN,A,157814,216.239.36.10 \ ns4.google.com.,IN,A,157814,216.239.38.10 -[73] 2016-10-20 15:24:06.339145 [#20 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:06.339145 [#20 dns.pcap 4095] \ [172.17.0.10].58176 [8.8.8.8].53 \ dns QUERY,NOERROR,25433,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:06.340820 [#21 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:06.340820 [#21 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].58176 \ dns QUERY,NOERROR,25433,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -189,11 +189,11 @@ ns3.google.com.,IN,A,157814,216.239.36.10 \ ns4.google.com.,IN,A,157814,216.239.38.10 \ ns2.google.com.,IN,A,157814,216.239.34.10 -[56] 2016-10-20 15:24:07.346429 [#22 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:07.346429 [#22 dns.pcap 4095] \ [172.17.0.10].41266 [8.8.8.8].53 \ dns QUERY,NOERROR,63798,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:07.348160 [#23 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:07.348160 [#23 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41266 \ dns QUERY,NOERROR,63798,qr|rd|ra \ 1 google.com.,IN,A \ @@ -206,11 +206,11 @@ ns1.google.com.,IN,A,331815,216.239.32.10 \ ns3.google.com.,IN,A,157813,216.239.36.10 \ ns4.google.com.,IN,A,157813,216.239.38.10 -[73] 2016-10-20 15:24:07.353123 [#24 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:07.353123 [#24 dns.pcap 4095] \ [172.17.0.10].34607 [8.8.8.8].53 \ dns QUERY,NOERROR,8470,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:07.354682 [#25 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:07.354682 [#25 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].34607 \ dns QUERY,NOERROR,8470,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -224,11 +224,11 @@ ns3.google.com.,IN,A,157813,216.239.36.10 \ ns4.google.com.,IN,A,157813,216.239.38.10 \ ns2.google.com.,IN,A,157813,216.239.34.10 -[56] 2016-10-20 15:24:08.360528 [#26 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:08.360528 [#26 dns.pcap 4095] \ [172.17.0.10].60437 [8.8.8.8].53 \ dns QUERY,NOERROR,60258,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:08.362206 [#27 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:08.362206 [#27 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60437 \ dns QUERY,NOERROR,60258,qr|rd|ra \ 1 google.com.,IN,A \ @@ -241,11 +241,11 @@ ns1.google.com.,IN,A,331814,216.239.32.10 \ ns3.google.com.,IN,A,157812,216.239.36.10 \ ns4.google.com.,IN,A,157812,216.239.38.10 -[73] 2016-10-20 15:24:08.368516 [#28 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:08.368516 [#28 dns.pcap 4095] \ [172.17.0.10].37149 [8.8.8.8].53 \ dns QUERY,NOERROR,44985,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:08.370119 [#29 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:08.370119 [#29 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37149 \ dns QUERY,NOERROR,44985,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -259,11 +259,11 @@ ns3.google.com.,IN,A,157812,216.239.36.10 \ ns4.google.com.,IN,A,157812,216.239.38.10 \ ns2.google.com.,IN,A,157812,216.239.34.10 -[56] 2016-10-20 15:24:09.375942 [#30 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:09.375942 [#30 dns.pcap 4095] \ [172.17.0.10].53820 [8.8.8.8].53 \ dns QUERY,NOERROR,45512,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:09.378425 [#31 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:09.378425 [#31 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53820 \ dns QUERY,NOERROR,45512,qr|rd|ra \ 1 google.com.,IN,A \ @@ -276,11 +276,11 @@ ns1.google.com.,IN,A,331813,216.239.32.10 \ ns3.google.com.,IN,A,157811,216.239.36.10 \ ns4.google.com.,IN,A,157811,216.239.38.10 -[73] 2016-10-20 15:24:09.384057 [#32 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:09.384057 [#32 dns.pcap 4095] \ [172.17.0.10].52368 [8.8.8.8].53 \ dns QUERY,NOERROR,22980,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:09.385463 [#33 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:09.385463 [#33 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].52368 \ dns QUERY,NOERROR,22980,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -294,11 +294,11 @@ ns3.google.com.,IN,A,157811,216.239.36.10 \ ns4.google.com.,IN,A,157811,216.239.38.10 \ ns2.google.com.,IN,A,157811,216.239.34.10 -[56] 2016-10-20 15:24:10.391358 [#34 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:10.391358 [#34 dns.pcap 4095] \ [172.17.0.10].47637 [8.8.8.8].53 \ dns QUERY,NOERROR,1834,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:10.392886 [#35 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:10.392886 [#35 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].47637 \ dns QUERY,NOERROR,1834,qr|rd|ra \ 1 google.com.,IN,A \ @@ -311,11 +311,11 @@ ns1.google.com.,IN,A,331812,216.239.32.10 \ ns3.google.com.,IN,A,157810,216.239.36.10 \ ns4.google.com.,IN,A,157810,216.239.38.10 -[73] 2016-10-20 15:24:10.398099 [#36 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:10.398099 [#36 dns.pcap 4095] \ [172.17.0.10].34426 [8.8.8.8].53 \ dns QUERY,NOERROR,25431,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:10.400317 [#37 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:10.400317 [#37 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].34426 \ dns QUERY,NOERROR,25431,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -329,11 +329,11 @@ ns3.google.com.,IN,A,157810,216.239.36.10 \ ns4.google.com.,IN,A,157810,216.239.38.10 \ ns2.google.com.,IN,A,157810,216.239.34.10 -[56] 2016-10-20 15:24:11.406297 [#38 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:11.406297 [#38 dns.pcap 4095] \ [172.17.0.10].41059 [8.8.8.8].53 \ dns QUERY,NOERROR,48432,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:11.407460 [#39 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:11.407460 [#39 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41059 \ dns QUERY,NOERROR,48432,qr|rd|ra \ 1 google.com.,IN,A \ @@ -346,11 +346,11 @@ ns1.google.com.,IN,A,331811,216.239.32.10 \ ns3.google.com.,IN,A,157809,216.239.36.10 \ ns4.google.com.,IN,A,157809,216.239.38.10 -[73] 2016-10-20 15:24:11.412133 [#40 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:11.412133 [#40 dns.pcap 4095] \ [172.17.0.10].51181 [8.8.8.8].53 \ dns QUERY,NOERROR,47411,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:11.413370 [#41 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:11.413370 [#41 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].51181 \ dns QUERY,NOERROR,47411,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -364,11 +364,11 @@ ns3.google.com.,IN,A,157809,216.239.36.10 \ ns4.google.com.,IN,A,157809,216.239.38.10 \ ns2.google.com.,IN,A,157809,216.239.34.10 -[56] 2016-10-20 15:24:12.419936 [#42 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:12.419936 [#42 dns.pcap 4095] \ [172.17.0.10].32976 [8.8.8.8].53 \ dns QUERY,NOERROR,12038,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:12.421228 [#43 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:12.421228 [#43 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].32976 \ dns QUERY,NOERROR,12038,qr|rd|ra \ 1 google.com.,IN,A \ @@ -381,11 +381,11 @@ ns1.google.com.,IN,A,331810,216.239.32.10 \ ns3.google.com.,IN,A,157808,216.239.36.10 \ ns4.google.com.,IN,A,157808,216.239.38.10 -[56] 2016-10-20 15:24:14.428524 [#44 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:14.428524 [#44 dns.pcap 4095] \ [172.17.0.10].53467 [8.8.8.8].53 \ dns QUERY,NOERROR,11614,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:14.429863 [#45 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:14.429863 [#45 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53467 \ dns QUERY,NOERROR,11614,qr|rd|ra \ 1 google.com.,IN,A \ @@ -398,11 +398,11 @@ ns1.google.com.,IN,A,331808,216.239.32.10 \ ns3.google.com.,IN,A,157806,216.239.36.10 \ ns4.google.com.,IN,A,157806,216.239.38.10 -[56] 2016-10-20 15:24:16.435733 [#46 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:16.435733 [#46 dns.pcap 4095] \ [172.17.0.10].41532 [8.8.8.8].53 \ dns QUERY,NOERROR,59173,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:16.437471 [#47 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:16.437471 [#47 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41532 \ dns QUERY,NOERROR,59173,qr|rd|ra \ 1 google.com.,IN,A \ @@ -415,11 +415,11 @@ ns1.google.com.,IN,A,331806,216.239.32.10 \ ns3.google.com.,IN,A,157804,216.239.36.10 \ ns4.google.com.,IN,A,157804,216.239.38.10 -[56] 2016-10-20 15:24:18.445519 [#48 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:18.445519 [#48 dns.pcap 4095] \ [172.17.0.10].44982 [8.8.8.8].53 \ dns QUERY,NOERROR,45535,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:18.446775 [#49 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:18.446775 [#49 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].44982 \ dns QUERY,NOERROR,45535,qr|rd|ra \ 1 google.com.,IN,A \ @@ -432,11 +432,11 @@ ns1.google.com.,IN,A,331804,216.239.32.10 \ ns3.google.com.,IN,A,157802,216.239.36.10 \ ns4.google.com.,IN,A,157802,216.239.38.10 -[73] 2016-10-20 15:24:18.452451 [#50 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:18.452451 [#50 dns.pcap 4095] \ [172.17.0.10].40224 [8.8.8.8].53 \ dns QUERY,NOERROR,60808,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:18.454030 [#51 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:18.454030 [#51 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40224 \ dns QUERY,NOERROR,60808,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -450,11 +450,11 @@ ns3.google.com.,IN,A,157802,216.239.36.10 \ ns4.google.com.,IN,A,157802,216.239.38.10 \ ns2.google.com.,IN,A,157802,216.239.34.10 -[56] 2016-10-20 15:24:19.460087 [#52 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:19.460087 [#52 dns.pcap 4095] \ [172.17.0.10].45658 [8.8.8.8].53 \ dns QUERY,NOERROR,64325,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:19.462224 [#53 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:19.462224 [#53 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45658 \ dns QUERY,NOERROR,64325,qr|rd|ra \ 1 google.com.,IN,A \ @@ -467,11 +467,11 @@ ns1.google.com.,IN,A,331803,216.239.32.10 \ ns3.google.com.,IN,A,157801,216.239.36.10 \ ns4.google.com.,IN,A,157801,216.239.38.10 -[73] 2016-10-20 15:24:19.467324 [#54 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:19.467324 [#54 dns.pcap 4095] \ [172.17.0.10].60457 [8.8.8.8].53 \ dns QUERY,NOERROR,25543,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:19.468895 [#55 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:19.468895 [#55 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60457 \ dns QUERY,NOERROR,25543,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -485,11 +485,11 @@ ns3.google.com.,IN,A,157801,216.239.36.10 \ ns4.google.com.,IN,A,157801,216.239.38.10 \ ns2.google.com.,IN,A,157801,216.239.34.10 -[56] 2016-10-20 15:24:20.475086 [#56 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:20.475086 [#56 dns.pcap 4095] \ [172.17.0.10].59762 [8.8.8.8].53 \ dns QUERY,NOERROR,20736,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:20.476841 [#57 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:20.476841 [#57 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].59762 \ dns QUERY,NOERROR,20736,qr|rd|ra \ 1 google.com.,IN,A \ @@ -502,11 +502,11 @@ ns1.google.com.,IN,A,331802,216.239.32.10 \ ns3.google.com.,IN,A,157800,216.239.36.10 \ ns4.google.com.,IN,A,157800,216.239.38.10 -[73] 2016-10-20 15:24:20.482188 [#58 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:20.482188 [#58 dns.pcap 4095] \ [172.17.0.10].56022 [8.8.8.8].53 \ dns QUERY,NOERROR,25911,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:20.483927 [#59 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:20.483927 [#59 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].56022 \ dns QUERY,NOERROR,25911,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -520,11 +520,11 @@ ns3.google.com.,IN,A,157800,216.239.36.10 \ ns4.google.com.,IN,A,157800,216.239.38.10 \ ns2.google.com.,IN,A,157800,216.239.34.10 -[56] 2016-10-20 15:24:21.489468 [#60 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:21.489468 [#60 dns.pcap 4095] \ [172.17.0.10].37669 [8.8.8.8].53 \ dns QUERY,NOERROR,64358,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:21.490573 [#61 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:21.490573 [#61 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37669 \ dns QUERY,NOERROR,64358,qr|rd|ra \ 1 google.com.,IN,A \ @@ -537,11 +537,11 @@ ns1.google.com.,IN,A,331801,216.239.32.10 \ ns3.google.com.,IN,A,157799,216.239.36.10 \ ns4.google.com.,IN,A,157799,216.239.38.10 -[73] 2016-10-20 15:24:21.495324 [#62 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:21.495324 [#62 dns.pcap 4095] \ [172.17.0.10].42978 [8.8.8.8].53 \ dns QUERY,NOERROR,37698,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:21.496815 [#63 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:21.496815 [#63 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].42978 \ dns QUERY,NOERROR,37698,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -555,11 +555,11 @@ ns3.google.com.,IN,A,157799,216.239.36.10 \ ns4.google.com.,IN,A,157799,216.239.38.10 \ ns2.google.com.,IN,A,157799,216.239.34.10 -[56] 2016-10-20 15:24:22.502667 [#64 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:22.502667 [#64 dns.pcap 4095] \ [172.17.0.10].49829 [8.8.8.8].53 \ dns QUERY,NOERROR,54706,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:22.504738 [#65 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:22.504738 [#65 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].49829 \ dns QUERY,NOERROR,54706,qr|rd|ra \ 1 google.com.,IN,A \ @@ -572,11 +572,11 @@ ns1.google.com.,IN,A,331800,216.239.32.10 \ ns3.google.com.,IN,A,157798,216.239.36.10 \ ns4.google.com.,IN,A,157798,216.239.38.10 -[73] 2016-10-20 15:24:22.510176 [#66 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:22.510176 [#66 dns.pcap 4095] \ [172.17.0.10].50599 [8.8.8.8].53 \ dns QUERY,NOERROR,32142,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:22.511746 [#67 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:22.511746 [#67 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].50599 \ dns QUERY,NOERROR,32142,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -590,11 +590,11 @@ ns3.google.com.,IN,A,157798,216.239.36.10 \ ns4.google.com.,IN,A,157798,216.239.38.10 \ ns2.google.com.,IN,A,157798,216.239.34.10 -[56] 2016-10-20 15:24:23.520203 [#68 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:23.520203 [#68 dns.pcap 4095] \ [172.17.0.10].44980 [8.8.8.8].53 \ dns QUERY,NOERROR,41808,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:23.521976 [#69 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:23.521976 [#69 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].44980 \ dns QUERY,NOERROR,41808,qr|rd|ra \ 1 google.com.,IN,A \ @@ -607,11 +607,11 @@ ns1.google.com.,IN,A,331799,216.239.32.10 \ ns3.google.com.,IN,A,157797,216.239.36.10 \ ns4.google.com.,IN,A,157797,216.239.38.10 -[73] 2016-10-20 15:24:23.527449 [#70 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:23.527449 [#70 dns.pcap 4095] \ [172.17.0.10].60063 [8.8.8.8].53 \ dns QUERY,NOERROR,18886,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:23.529385 [#71 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:23.529385 [#71 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60063 \ dns QUERY,NOERROR,18886,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -625,11 +625,11 @@ ns3.google.com.,IN,A,157797,216.239.36.10 \ ns4.google.com.,IN,A,157797,216.239.38.10 \ ns2.google.com.,IN,A,157797,216.239.34.10 -[56] 2016-10-20 15:24:24.537264 [#72 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:24.537264 [#72 dns.pcap 4095] \ [172.17.0.10].42042 [8.8.8.8].53 \ dns QUERY,NOERROR,10624,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:24.539398 [#73 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:24.539398 [#73 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].42042 \ dns QUERY,NOERROR,10624,qr|rd|ra \ 1 google.com.,IN,A \ @@ -642,11 +642,11 @@ ns1.google.com.,IN,A,331798,216.239.32.10 \ ns3.google.com.,IN,A,157796,216.239.36.10 \ ns4.google.com.,IN,A,157796,216.239.38.10 -[73] 2016-10-20 15:24:24.544538 [#74 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:24.544538 [#74 dns.pcap 4095] \ [172.17.0.10].60469 [8.8.8.8].53 \ dns QUERY,NOERROR,33139,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:24.546172 [#75 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:24.546172 [#75 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60469 \ dns QUERY,NOERROR,33139,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -660,11 +660,11 @@ ns3.google.com.,IN,A,157796,216.239.36.10 \ ns4.google.com.,IN,A,157796,216.239.38.10 \ ns2.google.com.,IN,A,157796,216.239.34.10 -[56] 2016-10-20 15:24:25.554744 [#76 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:25.554744 [#76 dns.pcap 4095] \ [172.17.0.10].45703 [8.8.8.8].53 \ dns QUERY,NOERROR,61415,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:25.556513 [#77 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:25.556513 [#77 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45703 \ dns QUERY,NOERROR,61415,qr|rd|ra \ 1 google.com.,IN,A \ @@ -677,11 +677,11 @@ ns1.google.com.,IN,A,331797,216.239.32.10 \ ns3.google.com.,IN,A,157795,216.239.36.10 \ ns4.google.com.,IN,A,157795,216.239.38.10 -[73] 2016-10-20 15:24:25.562608 [#78 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:25.562608 [#78 dns.pcap 4095] \ [172.17.0.10].33507 [8.8.8.8].53 \ dns QUERY,NOERROR,59258,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:25.564509 [#79 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:25.564509 [#79 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].33507 \ dns QUERY,NOERROR,59258,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -695,11 +695,11 @@ ns3.google.com.,IN,A,157795,216.239.36.10 \ ns4.google.com.,IN,A,157795,216.239.38.10 \ ns2.google.com.,IN,A,157795,216.239.34.10 -[56] 2016-10-20 15:24:26.572784 [#80 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:26.572784 [#80 dns.pcap 4095] \ [172.17.0.10].46798 [8.8.8.8].53 \ dns QUERY,NOERROR,17700,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:26.574350 [#81 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:26.574350 [#81 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].46798 \ dns QUERY,NOERROR,17700,qr|rd|ra \ 1 google.com.,IN,A \ diff --git a/src/test/dnspad.gold b/src/test/dnspad.gold index 8a5275a..82ae5fa 100644 --- a/src/test/dnspad.gold +++ b/src/test/dnspad.gold @@ -1,8 +1,8 @@ -[59] 2016-10-20 15:23:01.075993 [#0 dnspad.pcap-dist 4095] \ +[59] 2016-10-20 15:23:01.075993 [#0 dnspad.pcap 4095] \ [172.17.0.10].53199 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[59] 2016-10-20 15:23:01.075993 [#0 dnspad.pcap-dist 4095] \ +[59] 2016-10-20 15:23:01.075993 [#0 dnspad.pcap 4095] \ [172.17.0.10].53199 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 diff --git a/src/test/edns.gold b/src/test/edns.gold new file mode 100644 index 0000000..3e39ade --- /dev/null +++ b/src/test/edns.gold @@ -0,0 +1,123 @@ +[64] 2023-07-05 07:21:38.669836 [#0 edns.pcap 4095] \ + [172.17.0.6].58541 [172.17.0.1].53 \ + dns QUERY,NOERROR,31428,rd \ + 1 h.root-servers.net.,IN,A 0 0 0 +[64] 2023-07-05 07:21:38.669891 [#1 edns.pcap 4095] \ + [172.17.0.6].58541 [172.17.0.1].53 \ + dns QUERY,NOERROR,5824,rd \ + 1 h.root-servers.net.,IN,AAAA 0 0 0 +[80] 2023-07-05 07:21:38.669977 [#2 edns.pcap 4095] \ + [172.17.0.1].53 [172.17.0.6].58541 \ + dns QUERY,NOERROR,31428,qr|rd|ra \ + 1 h.root-servers.net.,IN,A \ + 1 h.root-servers.net.,IN,A,85098,198.97.190.53 0 0 +[92] 2023-07-05 07:21:38.670010 [#3 edns.pcap 4095] \ + [172.17.0.1].53 [172.17.0.6].58541 \ + dns QUERY,NOERROR,5824,qr|rd|ra \ + 1 h.root-servers.net.,IN,AAAA \ + 1 h.root-servers.net.,IN,AAAA,85098,2001:500:1::53 0 0 +[88] 2023-07-05 07:21:38.670793 [#4 edns.pcap 4095] \ + [172.17.0.6].33737 [198.97.190.53].53 \ + dns QUERY,NOERROR,56979,rd|ad \ + 1 ns1.dns.nic.aaa.,IN,NS 0 0 \ + 1 .,4096,4096,0,edns0[len=16,UDP=4096,ver=0,rcode=0,DO=0,z=0],edns0opt[code=3,codelen=0],edns0opt[code=10,codelen=8] +[464] 2023-07-05 07:21:38.698303 [#5 edns.pcap 4095] \ + [198.97.190.53].53 [172.17.0.6].33737 \ + dns QUERY,NOERROR,56979,qr|rd \ + 1 ns1.dns.nic.aaa.,IN,NS 0 \ + 6 aaa.,IN,NS,172800,a.nic.aaa. \ + aaa.,IN,NS,172800,b.nic.aaa. \ + aaa.,IN,NS,172800,c.nic.aaa. \ + aaa.,IN,NS,172800,ns1.dns.nic.aaa. \ + aaa.,IN,NS,172800,ns2.dns.nic.aaa. \ + aaa.,IN,NS,172800,ns3.dns.nic.aaa. \ + 13 a.nic.aaa.,IN,A,172800,37.209.192.9 \ + b.nic.aaa.,IN,A,172800,37.209.194.9 \ + c.nic.aaa.,IN,A,172800,37.209.196.9 \ + ns1.dns.nic.aaa.,IN,A,172800,156.154.144.2 \ + ns2.dns.nic.aaa.,IN,A,172800,156.154.145.2 \ + ns3.dns.nic.aaa.,IN,A,172800,156.154.159.2 \ + a.nic.aaa.,IN,AAAA,172800,2001:dcd:1::9 \ + b.nic.aaa.,IN,AAAA,172800,2001:dcd:2::9 \ + c.nic.aaa.,IN,AAAA,172800,2001:dcd:3::9 \ + ns1.dns.nic.aaa.,IN,AAAA,172800,2610:a1:1071::2 \ + ns2.dns.nic.aaa.,IN,AAAA,172800,2610:a1:1072::2 \ + ns3.dns.nic.aaa.,IN,AAAA,172800,2610:a1:1073::2 \ + .,1232,1232,0,edns0[len=30,UDP=1232,ver=0,rcode=0,DO=0,z=0],edns0opt[code=3,codelen=26] +[64] 2023-07-05 07:21:42.739334 [#6 edns.pcap 4095] \ + [172.17.0.6].53174 [172.17.0.1].53 \ + dns QUERY,NOERROR,48648,rd \ + 1 g.root-servers.net.,IN,A 0 0 0 +[64] 2023-07-05 07:21:42.739396 [#7 edns.pcap 4095] \ + [172.17.0.6].53174 [172.17.0.1].53 \ + dns QUERY,NOERROR,48141,rd \ + 1 g.root-servers.net.,IN,AAAA 0 0 0 +[80] 2023-07-05 07:21:42.739525 [#8 edns.pcap 4095] \ + [172.17.0.1].53 [172.17.0.6].53174 \ + dns QUERY,NOERROR,48648,qr|rd|ra \ + 1 g.root-servers.net.,IN,A \ + 1 g.root-servers.net.,IN,A,85094,192.112.36.4 0 0 +[92] 2023-07-05 07:21:42.739558 [#9 edns.pcap 4095] \ + [172.17.0.1].53 [172.17.0.6].53174 \ + dns QUERY,NOERROR,48141,qr|rd|ra \ + 1 g.root-servers.net.,IN,AAAA \ + 1 g.root-servers.net.,IN,AAAA,85094,2001:500:12::d0d 0 0 +[83] 2023-07-05 07:21:42.740590 [#10 edns.pcap 4095] \ + [172.17.0.6].50901 [192.112.36.4].53 \ + dns QUERY,NOERROR,35713,rd|ad \ + 1 net.,IN,A 0 0 \ + 1 .,4096,4096,0,edns0[len=23,UDP=4096,ver=0,rcode=0,DO=0,z=0],edns0opt[ECS,family=1,source=24,scope=0,addr=172.17.0.0],edns0opt[code=10,codelen=8] +[895] 2023-07-05 07:21:42.836816 [#11 edns.pcap 4095] \ + [192.112.36.4].53 [172.17.0.6].50901 \ + dns QUERY,NOERROR,35713,qr|rd \ + 1 net.,IN,A 0 \ + 13 net.,IN,NS,172800,j.gtld-servers.net. \ + net.,IN,NS,172800,b.gtld-servers.net. \ + net.,IN,NS,172800,a.gtld-servers.net. \ + net.,IN,NS,172800,h.gtld-servers.net. \ + net.,IN,NS,172800,d.gtld-servers.net. \ + net.,IN,NS,172800,c.gtld-servers.net. \ + net.,IN,NS,172800,i.gtld-servers.net. \ + net.,IN,NS,172800,e.gtld-servers.net. \ + net.,IN,NS,172800,m.gtld-servers.net. \ + net.,IN,NS,172800,f.gtld-servers.net. \ + net.,IN,NS,172800,k.gtld-servers.net. \ + net.,IN,NS,172800,l.gtld-servers.net. \ + net.,IN,NS,172800,g.gtld-servers.net. \ + 27 m.gtld-servers.net.,IN,A,172800,192.55.83.30 \ + l.gtld-servers.net.,IN,A,172800,192.41.162.30 \ + k.gtld-servers.net.,IN,A,172800,192.52.178.30 \ + j.gtld-servers.net.,IN,A,172800,192.48.79.30 \ + i.gtld-servers.net.,IN,A,172800,192.43.172.30 \ + h.gtld-servers.net.,IN,A,172800,192.54.112.30 \ + g.gtld-servers.net.,IN,A,172800,192.42.93.30 \ + f.gtld-servers.net.,IN,A,172800,192.35.51.30 \ + e.gtld-servers.net.,IN,A,172800,192.12.94.30 \ + d.gtld-servers.net.,IN,A,172800,192.31.80.30 \ + c.gtld-servers.net.,IN,A,172800,192.26.92.30 \ + b.gtld-servers.net.,IN,A,172800,192.33.14.30 \ + a.gtld-servers.net.,IN,A,172800,192.5.6.30 \ + m.gtld-servers.net.,IN,AAAA,172800,2001:501:b1f9::30 \ + l.gtld-servers.net.,IN,AAAA,172800,2001:500:d937::30 \ + k.gtld-servers.net.,IN,AAAA,172800,2001:503:d2d::30 \ + j.gtld-servers.net.,IN,AAAA,172800,2001:502:7094::30 \ + i.gtld-servers.net.,IN,AAAA,172800,2001:503:39c1::30 \ + h.gtld-servers.net.,IN,AAAA,172800,2001:502:8cc::30 \ + g.gtld-servers.net.,IN,AAAA,172800,2001:503:eea3::30 \ + f.gtld-servers.net.,IN,AAAA,172800,2001:503:d414::30 \ + e.gtld-servers.net.,IN,AAAA,172800,2001:502:1ca1::30 \ + d.gtld-servers.net.,IN,AAAA,172800,2001:500:856e::30 \ + c.gtld-servers.net.,IN,AAAA,172800,2001:503:83eb::30 \ + b.gtld-servers.net.,IN,AAAA,172800,2001:503:231d::2:30 \ + a.gtld-servers.net.,IN,AAAA,172800,2001:503:a83e::2:30 \ + .,1232,1232,0,edns0[len=39,UDP=1232,ver=0,rcode=0,DO=0,z=0],edns0opt[code=10,codelen=24],edns0opt[ECS,family=1,source=24,scope=0,addr=172.17.0.0] +[86] 2023-07-05 07:21:46.511502 [#12 edns.pcap 4095] \ + [172.17.0.6].35191 [1.1.1.1].53 \ + dns QUERY,NOERROR,960,rd|ad \ + 1 dnssec-failed.org.,IN,A 0 0 \ + 1 .,4096,4096,0,edns0[len=12,UDP=4096,ver=0,rcode=0,DO=0,z=0],edns0opt[code=10,codelen=8] +[131] 2023-07-05 07:21:46.518500 [#13 edns.pcap 4095] \ + [1.1.1.1].53 [172.17.0.6].35191 \ + dns QUERY,SERVFAIL,960,qr|rd|ra \ + 1 dnssec-failed.org.,IN,A 0 0 \ + 1 .,1232,1232,0,edns0[len=57,UDP=1232,ver=0,rcode=0,DO=0,z=0],edns0opt[code=15,codelen=53] diff --git a/src/test/edns.pcap b/src/test/edns.pcap Binary files differnew file mode 100644 index 0000000..1d4dd1f --- /dev/null +++ b/src/test/edns.pcap diff --git a/src/test/test1.sh b/src/test/test1.sh index 03142c9..deec4bf 100755 --- a/src/test/test1.sh +++ b/src/test/test1.sh @@ -1,6 +1,8 @@ #!/bin/sh -xe -../dnscap -g -r dns.pcap-dist 2>dns.out +test -e dns.pcap || ln -s "$srcdir/dns.pcap" dns.pcap + +../dnscap -g -r dns.pcap 2>dns.out mv dns.out dns.out.old grep -v "^libgcov profiling error:" dns.out.old > dns.out diff --git a/src/test/test10.gold b/src/test/test10.gold index 69f51ef..d03011b 100644 --- a/src/test/test10.gold +++ b/src/test/test10.gold @@ -1,20 +1,20 @@ -[87] 2018-11-27 15:52:00.414188 [#0 dns6.pcap-dist 4095] \ +[87] 2018-11-27 15:52:00.414188 [#0 dns6.pcap 4095] \ [2a01:3f0:0:57::245].51972 [2001:4860:4860::8888].53 \ dns QUERY,NOERROR,51420,rd|ad \ 1 google.com.,IN,A 0 0 \ 1 .,4096,4096,0,edns0[len=0,UDP=4096,ver=0,rcode=0,DO=0,z=0] -[103] 2018-11-27 15:52:00.428453 [#1 dns6.pcap-dist 4095] \ +[103] 2018-11-27 15:52:00.428453 [#1 dns6.pcap 4095] \ [2001:4860:4860::8888].53 [2a01:3f0:0:57::245].51972 \ dns QUERY,NOERROR,51420,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,299,172.217.20.46 0 \ 1 .,512,512,0,edns0[len=0,UDP=512,ver=0,rcode=0,DO=0,z=0] -[87] 2018-11-27 15:52:00.414188 [#0 dns6.pcap-dist 4095] \ +[87] 2018-11-27 15:52:00.414188 [#0 dns6.pcap 4095] \ [2a01:3f0:0:57::245].51972 [2001:4860:4860::8888].53 \ dns QUERY,NOERROR,51420,rd|ad \ 1 google.com.,IN,A 0 0 \ 1 .,4096,4096,0,edns0[len=0,UDP=4096,ver=0,rcode=0,DO=0,z=0] -[103] 2018-11-27 15:52:00.428453 [#1 dns6.pcap-dist 4095] \ +[103] 2018-11-27 15:52:00.428453 [#1 dns6.pcap 4095] \ [2001:4860:4860::8888].53 [2a01:3f0:0:57::245].51972 \ dns QUERY,NOERROR,51420,qr|rd|ra \ 1 google.com.,IN,A \ diff --git a/src/test/test10.sh b/src/test/test10.sh index 2779cb0..81375ed 100755 --- a/src/test/test10.sh +++ b/src/test/test10.sh @@ -1,6 +1,8 @@ #!/bin/sh -xe -../dnscap -r dns6.pcap-dist -g 2>test10.out -../dnscap -r dns6.pcap-dist -o use_layers=yes -g 2>>test10.out +test -e dns6.pcap || ln -s "$srcdir/dns6.pcap" dns6.pcap + +../dnscap -r dns6.pcap -g 2>test10.out +../dnscap -r dns6.pcap -o use_layers=yes -g 2>>test10.out diff test10.out "$srcdir/test10.gold" diff --git a/src/test/test11.sh b/src/test/test11.sh index 7f58c89..d8f4d40 100755 --- a/src/test/test11.sh +++ b/src/test/test11.sh @@ -1,5 +1,7 @@ #!/bin/sh -xe +test -e dns.pcap || ln -s "$srcdir/dns.pcap" dns.pcap + ../dnscap -? ! ../dnscap -j @@ -42,13 +44,13 @@ fi ../dnscap -V -../dnscap -r dns.pcap-dist -g -ddddd -../dnscap -r dns.pcap-dist -x '.*' -X '.*' -g -ddddd +../dnscap -r dns.pcap -g -ddddd +../dnscap -r dns.pcap -x '.*' -X '.*' -g -ddddd -! ../dnscap -r dns.pcap-dist -i fake 2>test11.out +! ../dnscap -r dns.pcap -i fake 2>test11.out cat test11.out grep -qF -- "-i makes no sense after -r" test11.out -! ../dnscap -i fake -r dns.pcap-dist 2>test11.out +! ../dnscap -i fake -r dns.pcap 2>test11.out cat test11.out grep -qF -- "-r makes no sense after -i" test11.out diff --git a/src/test/test12.sh b/src/test/test12.sh index 76b0e01..9243ed9 100755 --- a/src/test/test12.sh +++ b/src/test/test12.sh @@ -1,6 +1,8 @@ #!/bin/sh -xe -if ! ../dnscap -g -r dns.pcap-dist -w test12 -W .gz 2>test12.out; then +test -e dns.pcap || ln -s "$srcdir/dns.pcap" dns.pcap + +if ! ../dnscap -g -r dns.pcap -w test12 -W .gz 2>test12.out; then grep -qF "gzip compression requested but not supported" test12.out && exit 0 exit 1 fi diff --git a/src/test/test13.sh b/src/test/test13.sh index 4749a92..4b8d523 100755 --- a/src/test/test13.sh +++ b/src/test/test13.sh @@ -2,6 +2,8 @@ test -f /etc/resolv.conf || exit 0 +test -e dns.pcap || ln -s "$srcdir/dns.pcap" dns.pcap + ! ../dnscap -a "fake_host-should+not/work" 2>test13.out cat test13.out grep -qF "invalid host address" test13.out @@ -9,20 +11,20 @@ grep -qF "invalid host address" test13.out if [ "`uname`" = "OpenBSD" ]; then # IPv6 addresses in BPF seems to segfault on OpenBSD and doing host and # not host throws generic pcap_compile error - ../dnscap -a 127.0.0.1 -r dns.pcap-dist -g -dddd - ../dnscap -z 127.0.0.1 -r dns.pcap-dist -g -dddd - ../dnscap -A 127.0.0.1 -r dns.pcap-dist -g -dddd - ../dnscap -Z 127.0.0.1 -r dns.pcap-dist -g -dddd - ../dnscap -Y 127.0.0.1 -r dns.pcap-dist -g -dddd + ../dnscap -a 127.0.0.1 -r dns.pcap -g -dddd + ../dnscap -z 127.0.0.1 -r dns.pcap -g -dddd + ../dnscap -A 127.0.0.1 -r dns.pcap -g -dddd + ../dnscap -Z 127.0.0.1 -r dns.pcap -g -dddd + ../dnscap -Y 127.0.0.1 -r dns.pcap -g -dddd else - ../dnscap -a 127.0.0.1 -a ::1 -r dns.pcap-dist -g -dddd - ../dnscap -z 127.0.0.1 -z ::1 -r dns.pcap-dist -g -dddd - ../dnscap -A 127.0.0.1 -A ::1 -r dns.pcap-dist -g -dddd - ../dnscap -Z 127.0.0.1 -Z ::1 -r dns.pcap-dist -g -dddd - ../dnscap -Y 127.0.0.1 -Y ::1 -r dns.pcap-dist -g -dddd + ../dnscap -a 127.0.0.1 -a ::1 -r dns.pcap -g -dddd + ../dnscap -z 127.0.0.1 -z ::1 -r dns.pcap -g -dddd + ../dnscap -A 127.0.0.1 -A ::1 -r dns.pcap -g -dddd + ../dnscap -Z 127.0.0.1 -Z ::1 -r dns.pcap -g -dddd + ../dnscap -Y 127.0.0.1 -Y ::1 -r dns.pcap -g -dddd fi if [ "$TEST_DNSCAP_WITH_NETWORK" = "1" ]; then - ../dnscap -a google.com -r dns.pcap-dist -g -dddd + ../dnscap -a google.com -r dns.pcap -g -dddd fi -../dnscap -Y 127.0.0.1 -r dns.pcap-dist -g -../dnscap -Y 8.8.8.8 -r dns.pcap-dist -g +../dnscap -Y 127.0.0.1 -r dns.pcap -g +../dnscap -Y 8.8.8.8 -r dns.pcap -g diff --git a/src/test/test14.gold b/src/test/test14.gold index fb342e2..183d042 100644 --- a/src/test/test14.gold +++ b/src/test/test14.gold @@ -1,9 +1,9 @@ -- only 1 -[56] 2016-10-20 15:23:01.075993 [#0 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:01.075993 [#0 dns.pcap 4095] \ [172.17.0.10].53199 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:01.077982 [#1 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:01.077982 [#1 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53199 \ dns QUERY,NOERROR,59311,qr|rd|ra \ 1 google.com.,IN,A \ @@ -16,11 +16,11 @@ ns1.google.com.,IN,A,331882,216.239.32.10 \ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 -[56] 2016-10-20 15:23:01.087291 [#2 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:01.087291 [#2 dns.pcap 4095] \ [172.17.0.10].40043 [8.8.8.8].53 \ dns QUERY,NOERROR,5337,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:01.088733 [#3 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:01.088733 [#3 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40043 \ dns QUERY,NOERROR,5337,qr|rd|ra \ 1 google.com.,IN,A \ @@ -33,11 +33,11 @@ ns1.google.com.,IN,A,331882,216.239.32.10 \ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 -[56] 2016-10-20 15:23:10.322117 [#4 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:10.322117 [#4 dns.pcap 4095] \ [172.17.0.10].37953 [8.8.8.8].53 \ dns QUERY,NOERROR,22982,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:10.323399 [#5 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:10.323399 [#5 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37953 \ dns QUERY,NOERROR,22982,qr|rd|ra \ 1 google.com.,IN,A \ @@ -50,11 +50,11 @@ ns1.google.com.,IN,A,331872,216.239.32.10 \ ns3.google.com.,IN,A,157870,216.239.36.10 \ ns4.google.com.,IN,A,157870,216.239.38.10 -[56] 2016-10-20 15:23:52.860937 [#6 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:52.860937 [#6 dns.pcap 4095] \ [172.17.0.10].40953 [8.8.8.8].53 \ dns QUERY,NOERROR,22531,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:52.863771 [#7 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:52.863771 [#7 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40953 \ dns QUERY,NOERROR,22531,qr|rd|ra \ 1 google.com.,IN,A \ @@ -67,11 +67,11 @@ ns1.google.com.,IN,A,331830,216.239.32.10 \ ns3.google.com.,IN,A,157828,216.239.36.10 \ ns4.google.com.,IN,A,157828,216.239.38.10 -[56] 2016-10-20 15:23:59.083869 [#8 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:59.083869 [#8 dns.pcap 4095] \ [172.17.0.10].45174 [8.8.8.8].53 \ dns QUERY,NOERROR,58510,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:59.086104 [#9 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:59.086104 [#9 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45174 \ dns QUERY,NOERROR,58510,qr|rd|ra \ 1 google.com.,IN,A \ @@ -84,11 +84,11 @@ ns1.google.com.,IN,A,331824,216.239.32.10 \ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 -[56] 2016-10-20 15:24:04.323868 [#10 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:04.323868 [#10 dns.pcap 4095] \ [172.17.0.10].43559 [8.8.8.8].53 \ dns QUERY,NOERROR,49483,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:04.325597 [#11 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:04.325597 [#11 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].43559 \ dns QUERY,NOERROR,49483,qr|rd|ra \ 1 google.com.,IN,A \ @@ -101,11 +101,11 @@ ns1.google.com.,IN,A,331818,216.239.32.10 \ ns3.google.com.,IN,A,157816,216.239.36.10 \ ns4.google.com.,IN,A,157816,216.239.38.10 -[56] 2016-10-20 15:24:06.332239 [#12 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:06.332239 [#12 dns.pcap 4095] \ [172.17.0.10].54859 [8.8.8.8].53 \ dns QUERY,NOERROR,31669,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:06.333743 [#13 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:06.333743 [#13 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].54859 \ dns QUERY,NOERROR,31669,qr|rd|ra \ 1 google.com.,IN,A \ @@ -118,11 +118,11 @@ ns1.google.com.,IN,A,331816,216.239.32.10 \ ns3.google.com.,IN,A,157814,216.239.36.10 \ ns4.google.com.,IN,A,157814,216.239.38.10 -[56] 2016-10-20 15:24:07.346429 [#14 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:07.346429 [#14 dns.pcap 4095] \ [172.17.0.10].41266 [8.8.8.8].53 \ dns QUERY,NOERROR,63798,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:07.348160 [#15 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:07.348160 [#15 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41266 \ dns QUERY,NOERROR,63798,qr|rd|ra \ 1 google.com.,IN,A \ @@ -135,11 +135,11 @@ ns1.google.com.,IN,A,331815,216.239.32.10 \ ns3.google.com.,IN,A,157813,216.239.36.10 \ ns4.google.com.,IN,A,157813,216.239.38.10 -[56] 2016-10-20 15:24:08.360528 [#16 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:08.360528 [#16 dns.pcap 4095] \ [172.17.0.10].60437 [8.8.8.8].53 \ dns QUERY,NOERROR,60258,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:08.362206 [#17 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:08.362206 [#17 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60437 \ dns QUERY,NOERROR,60258,qr|rd|ra \ 1 google.com.,IN,A \ @@ -152,11 +152,11 @@ ns1.google.com.,IN,A,331814,216.239.32.10 \ ns3.google.com.,IN,A,157812,216.239.36.10 \ ns4.google.com.,IN,A,157812,216.239.38.10 -[56] 2016-10-20 15:24:09.375942 [#18 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:09.375942 [#18 dns.pcap 4095] \ [172.17.0.10].53820 [8.8.8.8].53 \ dns QUERY,NOERROR,45512,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:09.378425 [#19 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:09.378425 [#19 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53820 \ dns QUERY,NOERROR,45512,qr|rd|ra \ 1 google.com.,IN,A \ @@ -169,11 +169,11 @@ ns1.google.com.,IN,A,331813,216.239.32.10 \ ns3.google.com.,IN,A,157811,216.239.36.10 \ ns4.google.com.,IN,A,157811,216.239.38.10 -[56] 2016-10-20 15:24:10.391358 [#20 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:10.391358 [#20 dns.pcap 4095] \ [172.17.0.10].47637 [8.8.8.8].53 \ dns QUERY,NOERROR,1834,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:10.392886 [#21 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:10.392886 [#21 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].47637 \ dns QUERY,NOERROR,1834,qr|rd|ra \ 1 google.com.,IN,A \ @@ -186,11 +186,11 @@ ns1.google.com.,IN,A,331812,216.239.32.10 \ ns3.google.com.,IN,A,157810,216.239.36.10 \ ns4.google.com.,IN,A,157810,216.239.38.10 -[56] 2016-10-20 15:24:11.406297 [#22 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:11.406297 [#22 dns.pcap 4095] \ [172.17.0.10].41059 [8.8.8.8].53 \ dns QUERY,NOERROR,48432,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:11.407460 [#23 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:11.407460 [#23 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41059 \ dns QUERY,NOERROR,48432,qr|rd|ra \ 1 google.com.,IN,A \ @@ -203,11 +203,11 @@ ns1.google.com.,IN,A,331811,216.239.32.10 \ ns3.google.com.,IN,A,157809,216.239.36.10 \ ns4.google.com.,IN,A,157809,216.239.38.10 -[56] 2016-10-20 15:24:12.419936 [#24 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:12.419936 [#24 dns.pcap 4095] \ [172.17.0.10].32976 [8.8.8.8].53 \ dns QUERY,NOERROR,12038,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:12.421228 [#25 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:12.421228 [#25 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].32976 \ dns QUERY,NOERROR,12038,qr|rd|ra \ 1 google.com.,IN,A \ @@ -220,11 +220,11 @@ ns1.google.com.,IN,A,331810,216.239.32.10 \ ns3.google.com.,IN,A,157808,216.239.36.10 \ ns4.google.com.,IN,A,157808,216.239.38.10 -[56] 2016-10-20 15:24:14.428524 [#26 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:14.428524 [#26 dns.pcap 4095] \ [172.17.0.10].53467 [8.8.8.8].53 \ dns QUERY,NOERROR,11614,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:14.429863 [#27 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:14.429863 [#27 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53467 \ dns QUERY,NOERROR,11614,qr|rd|ra \ 1 google.com.,IN,A \ @@ -237,11 +237,11 @@ ns1.google.com.,IN,A,331808,216.239.32.10 \ ns3.google.com.,IN,A,157806,216.239.36.10 \ ns4.google.com.,IN,A,157806,216.239.38.10 -[56] 2016-10-20 15:24:16.435733 [#28 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:16.435733 [#28 dns.pcap 4095] \ [172.17.0.10].41532 [8.8.8.8].53 \ dns QUERY,NOERROR,59173,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:16.437471 [#29 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:16.437471 [#29 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41532 \ dns QUERY,NOERROR,59173,qr|rd|ra \ 1 google.com.,IN,A \ @@ -254,11 +254,11 @@ ns1.google.com.,IN,A,331806,216.239.32.10 \ ns3.google.com.,IN,A,157804,216.239.36.10 \ ns4.google.com.,IN,A,157804,216.239.38.10 -[56] 2016-10-20 15:24:18.445519 [#30 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:18.445519 [#30 dns.pcap 4095] \ [172.17.0.10].44982 [8.8.8.8].53 \ dns QUERY,NOERROR,45535,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:18.446775 [#31 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:18.446775 [#31 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].44982 \ dns QUERY,NOERROR,45535,qr|rd|ra \ 1 google.com.,IN,A \ @@ -271,11 +271,11 @@ ns1.google.com.,IN,A,331804,216.239.32.10 \ ns3.google.com.,IN,A,157802,216.239.36.10 \ ns4.google.com.,IN,A,157802,216.239.38.10 -[56] 2016-10-20 15:24:19.460087 [#32 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:19.460087 [#32 dns.pcap 4095] \ [172.17.0.10].45658 [8.8.8.8].53 \ dns QUERY,NOERROR,64325,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:19.462224 [#33 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:19.462224 [#33 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45658 \ dns QUERY,NOERROR,64325,qr|rd|ra \ 1 google.com.,IN,A \ @@ -288,11 +288,11 @@ ns1.google.com.,IN,A,331803,216.239.32.10 \ ns3.google.com.,IN,A,157801,216.239.36.10 \ ns4.google.com.,IN,A,157801,216.239.38.10 -[56] 2016-10-20 15:24:20.475086 [#34 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:20.475086 [#34 dns.pcap 4095] \ [172.17.0.10].59762 [8.8.8.8].53 \ dns QUERY,NOERROR,20736,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:20.476841 [#35 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:20.476841 [#35 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].59762 \ dns QUERY,NOERROR,20736,qr|rd|ra \ 1 google.com.,IN,A \ @@ -305,11 +305,11 @@ ns1.google.com.,IN,A,331802,216.239.32.10 \ ns3.google.com.,IN,A,157800,216.239.36.10 \ ns4.google.com.,IN,A,157800,216.239.38.10 -[56] 2016-10-20 15:24:21.489468 [#36 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:21.489468 [#36 dns.pcap 4095] \ [172.17.0.10].37669 [8.8.8.8].53 \ dns QUERY,NOERROR,64358,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:21.490573 [#37 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:21.490573 [#37 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37669 \ dns QUERY,NOERROR,64358,qr|rd|ra \ 1 google.com.,IN,A \ @@ -322,11 +322,11 @@ ns1.google.com.,IN,A,331801,216.239.32.10 \ ns3.google.com.,IN,A,157799,216.239.36.10 \ ns4.google.com.,IN,A,157799,216.239.38.10 -[56] 2016-10-20 15:24:22.502667 [#38 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:22.502667 [#38 dns.pcap 4095] \ [172.17.0.10].49829 [8.8.8.8].53 \ dns QUERY,NOERROR,54706,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:22.504738 [#39 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:22.504738 [#39 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].49829 \ dns QUERY,NOERROR,54706,qr|rd|ra \ 1 google.com.,IN,A \ @@ -339,11 +339,11 @@ ns1.google.com.,IN,A,331800,216.239.32.10 \ ns3.google.com.,IN,A,157798,216.239.36.10 \ ns4.google.com.,IN,A,157798,216.239.38.10 -[56] 2016-10-20 15:24:23.520203 [#40 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:23.520203 [#40 dns.pcap 4095] \ [172.17.0.10].44980 [8.8.8.8].53 \ dns QUERY,NOERROR,41808,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:23.521976 [#41 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:23.521976 [#41 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].44980 \ dns QUERY,NOERROR,41808,qr|rd|ra \ 1 google.com.,IN,A \ @@ -356,11 +356,11 @@ ns1.google.com.,IN,A,331799,216.239.32.10 \ ns3.google.com.,IN,A,157797,216.239.36.10 \ ns4.google.com.,IN,A,157797,216.239.38.10 -[56] 2016-10-20 15:24:24.537264 [#42 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:24.537264 [#42 dns.pcap 4095] \ [172.17.0.10].42042 [8.8.8.8].53 \ dns QUERY,NOERROR,10624,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:24.539398 [#43 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:24.539398 [#43 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].42042 \ dns QUERY,NOERROR,10624,qr|rd|ra \ 1 google.com.,IN,A \ @@ -373,11 +373,11 @@ ns1.google.com.,IN,A,331798,216.239.32.10 \ ns3.google.com.,IN,A,157796,216.239.36.10 \ ns4.google.com.,IN,A,157796,216.239.38.10 -[56] 2016-10-20 15:24:25.554744 [#44 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:25.554744 [#44 dns.pcap 4095] \ [172.17.0.10].45703 [8.8.8.8].53 \ dns QUERY,NOERROR,61415,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:25.556513 [#45 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:25.556513 [#45 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45703 \ dns QUERY,NOERROR,61415,qr|rd|ra \ 1 google.com.,IN,A \ @@ -390,11 +390,11 @@ ns1.google.com.,IN,A,331797,216.239.32.10 \ ns3.google.com.,IN,A,157795,216.239.36.10 \ ns4.google.com.,IN,A,157795,216.239.38.10 -[56] 2016-10-20 15:24:26.572784 [#46 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:26.572784 [#46 dns.pcap 4095] \ [172.17.0.10].46798 [8.8.8.8].53 \ dns QUERY,NOERROR,17700,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:26.574350 [#47 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:26.574350 [#47 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].46798 \ dns QUERY,NOERROR,17700,qr|rd|ra \ 1 google.com.,IN,A \ @@ -408,11 +408,11 @@ ns3.google.com.,IN,A,157794,216.239.36.10 \ ns4.google.com.,IN,A,157794,216.239.38.10 -- not 1 -[73] 2016-10-20 15:23:01.082865 [#0 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:01.082865 [#0 dns.pcap 4095] \ [172.17.0.10].57822 [8.8.8.8].53 \ dns QUERY,NOERROR,35665,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:01.084107 [#1 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:01.084107 [#1 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].57822 \ dns QUERY,NOERROR,35665,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -426,11 +426,11 @@ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 \ ns2.google.com.,IN,A,157880,216.239.34.10 -[73] 2016-10-20 15:23:10.328324 [#2 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:10.328324 [#2 dns.pcap 4095] \ [172.17.0.10].48658 [8.8.8.8].53 \ dns QUERY,NOERROR,18718,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:10.329572 [#3 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:10.329572 [#3 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].48658 \ dns QUERY,NOERROR,18718,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -444,11 +444,11 @@ ns3.google.com.,IN,A,157870,216.239.36.10 \ ns4.google.com.,IN,A,157870,216.239.38.10 \ ns2.google.com.,IN,A,157870,216.239.34.10 -[73] 2016-10-20 15:23:59.090911 [#4 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:59.090911 [#4 dns.pcap 4095] \ [172.17.0.10].33916 [8.8.8.8].53 \ dns QUERY,NOERROR,45248,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:59.092204 [#5 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:59.092204 [#5 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].33916 \ dns QUERY,NOERROR,45248,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -462,11 +462,11 @@ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 \ ns2.google.com.,IN,A,157822,216.239.34.10 -[73] 2016-10-20 15:24:06.339145 [#6 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:06.339145 [#6 dns.pcap 4095] \ [172.17.0.10].58176 [8.8.8.8].53 \ dns QUERY,NOERROR,25433,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:06.340820 [#7 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:06.340820 [#7 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].58176 \ dns QUERY,NOERROR,25433,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -480,11 +480,11 @@ ns3.google.com.,IN,A,157814,216.239.36.10 \ ns4.google.com.,IN,A,157814,216.239.38.10 \ ns2.google.com.,IN,A,157814,216.239.34.10 -[73] 2016-10-20 15:24:07.353123 [#8 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:07.353123 [#8 dns.pcap 4095] \ [172.17.0.10].34607 [8.8.8.8].53 \ dns QUERY,NOERROR,8470,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:07.354682 [#9 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:07.354682 [#9 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].34607 \ dns QUERY,NOERROR,8470,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -498,11 +498,11 @@ ns3.google.com.,IN,A,157813,216.239.36.10 \ ns4.google.com.,IN,A,157813,216.239.38.10 \ ns2.google.com.,IN,A,157813,216.239.34.10 -[73] 2016-10-20 15:24:08.368516 [#10 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:08.368516 [#10 dns.pcap 4095] \ [172.17.0.10].37149 [8.8.8.8].53 \ dns QUERY,NOERROR,44985,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:08.370119 [#11 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:08.370119 [#11 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37149 \ dns QUERY,NOERROR,44985,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -516,11 +516,11 @@ ns3.google.com.,IN,A,157812,216.239.36.10 \ ns4.google.com.,IN,A,157812,216.239.38.10 \ ns2.google.com.,IN,A,157812,216.239.34.10 -[73] 2016-10-20 15:24:09.384057 [#12 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:09.384057 [#12 dns.pcap 4095] \ [172.17.0.10].52368 [8.8.8.8].53 \ dns QUERY,NOERROR,22980,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:09.385463 [#13 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:09.385463 [#13 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].52368 \ dns QUERY,NOERROR,22980,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -534,11 +534,11 @@ ns3.google.com.,IN,A,157811,216.239.36.10 \ ns4.google.com.,IN,A,157811,216.239.38.10 \ ns2.google.com.,IN,A,157811,216.239.34.10 -[73] 2016-10-20 15:24:10.398099 [#14 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:10.398099 [#14 dns.pcap 4095] \ [172.17.0.10].34426 [8.8.8.8].53 \ dns QUERY,NOERROR,25431,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:10.400317 [#15 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:10.400317 [#15 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].34426 \ dns QUERY,NOERROR,25431,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -552,11 +552,11 @@ ns3.google.com.,IN,A,157810,216.239.36.10 \ ns4.google.com.,IN,A,157810,216.239.38.10 \ ns2.google.com.,IN,A,157810,216.239.34.10 -[73] 2016-10-20 15:24:11.412133 [#16 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:11.412133 [#16 dns.pcap 4095] \ [172.17.0.10].51181 [8.8.8.8].53 \ dns QUERY,NOERROR,47411,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:11.413370 [#17 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:11.413370 [#17 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].51181 \ dns QUERY,NOERROR,47411,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -570,11 +570,11 @@ ns3.google.com.,IN,A,157809,216.239.36.10 \ ns4.google.com.,IN,A,157809,216.239.38.10 \ ns2.google.com.,IN,A,157809,216.239.34.10 -[73] 2016-10-20 15:24:18.452451 [#18 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:18.452451 [#18 dns.pcap 4095] \ [172.17.0.10].40224 [8.8.8.8].53 \ dns QUERY,NOERROR,60808,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:18.454030 [#19 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:18.454030 [#19 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40224 \ dns QUERY,NOERROR,60808,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -588,11 +588,11 @@ ns3.google.com.,IN,A,157802,216.239.36.10 \ ns4.google.com.,IN,A,157802,216.239.38.10 \ ns2.google.com.,IN,A,157802,216.239.34.10 -[73] 2016-10-20 15:24:19.467324 [#20 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:19.467324 [#20 dns.pcap 4095] \ [172.17.0.10].60457 [8.8.8.8].53 \ dns QUERY,NOERROR,25543,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:19.468895 [#21 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:19.468895 [#21 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60457 \ dns QUERY,NOERROR,25543,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -606,11 +606,11 @@ ns3.google.com.,IN,A,157801,216.239.36.10 \ ns4.google.com.,IN,A,157801,216.239.38.10 \ ns2.google.com.,IN,A,157801,216.239.34.10 -[73] 2016-10-20 15:24:20.482188 [#22 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:20.482188 [#22 dns.pcap 4095] \ [172.17.0.10].56022 [8.8.8.8].53 \ dns QUERY,NOERROR,25911,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:20.483927 [#23 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:20.483927 [#23 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].56022 \ dns QUERY,NOERROR,25911,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -624,11 +624,11 @@ ns3.google.com.,IN,A,157800,216.239.36.10 \ ns4.google.com.,IN,A,157800,216.239.38.10 \ ns2.google.com.,IN,A,157800,216.239.34.10 -[73] 2016-10-20 15:24:21.495324 [#24 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:21.495324 [#24 dns.pcap 4095] \ [172.17.0.10].42978 [8.8.8.8].53 \ dns QUERY,NOERROR,37698,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:21.496815 [#25 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:21.496815 [#25 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].42978 \ dns QUERY,NOERROR,37698,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -642,11 +642,11 @@ ns3.google.com.,IN,A,157799,216.239.36.10 \ ns4.google.com.,IN,A,157799,216.239.38.10 \ ns2.google.com.,IN,A,157799,216.239.34.10 -[73] 2016-10-20 15:24:22.510176 [#26 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:22.510176 [#26 dns.pcap 4095] \ [172.17.0.10].50599 [8.8.8.8].53 \ dns QUERY,NOERROR,32142,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:22.511746 [#27 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:22.511746 [#27 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].50599 \ dns QUERY,NOERROR,32142,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -660,11 +660,11 @@ ns3.google.com.,IN,A,157798,216.239.36.10 \ ns4.google.com.,IN,A,157798,216.239.38.10 \ ns2.google.com.,IN,A,157798,216.239.34.10 -[73] 2016-10-20 15:24:23.527449 [#28 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:23.527449 [#28 dns.pcap 4095] \ [172.17.0.10].60063 [8.8.8.8].53 \ dns QUERY,NOERROR,18886,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:23.529385 [#29 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:23.529385 [#29 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60063 \ dns QUERY,NOERROR,18886,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -678,11 +678,11 @@ ns3.google.com.,IN,A,157797,216.239.36.10 \ ns4.google.com.,IN,A,157797,216.239.38.10 \ ns2.google.com.,IN,A,157797,216.239.34.10 -[73] 2016-10-20 15:24:24.544538 [#30 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:24.544538 [#30 dns.pcap 4095] \ [172.17.0.10].60469 [8.8.8.8].53 \ dns QUERY,NOERROR,33139,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:24.546172 [#31 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:24.546172 [#31 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60469 \ dns QUERY,NOERROR,33139,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -696,11 +696,11 @@ ns3.google.com.,IN,A,157796,216.239.36.10 \ ns4.google.com.,IN,A,157796,216.239.38.10 \ ns2.google.com.,IN,A,157796,216.239.34.10 -[73] 2016-10-20 15:24:25.562608 [#32 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:25.562608 [#32 dns.pcap 4095] \ [172.17.0.10].33507 [8.8.8.8].53 \ dns QUERY,NOERROR,59258,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:25.564509 [#33 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:25.564509 [#33 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].33507 \ dns QUERY,NOERROR,59258,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -715,11 +715,11 @@ ns4.google.com.,IN,A,157795,216.239.38.10 \ ns2.google.com.,IN,A,157795,216.239.34.10 -- only PTR -[73] 2016-10-20 15:23:01.082865 [#0 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:01.082865 [#0 dns.pcap 4095] \ [172.17.0.10].57822 [8.8.8.8].53 \ dns QUERY,NOERROR,35665,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:01.084107 [#1 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:01.084107 [#1 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].57822 \ dns QUERY,NOERROR,35665,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -733,11 +733,11 @@ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 \ ns2.google.com.,IN,A,157880,216.239.34.10 -[73] 2016-10-20 15:23:10.328324 [#2 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:10.328324 [#2 dns.pcap 4095] \ [172.17.0.10].48658 [8.8.8.8].53 \ dns QUERY,NOERROR,18718,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:10.329572 [#3 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:10.329572 [#3 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].48658 \ dns QUERY,NOERROR,18718,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -751,11 +751,11 @@ ns3.google.com.,IN,A,157870,216.239.36.10 \ ns4.google.com.,IN,A,157870,216.239.38.10 \ ns2.google.com.,IN,A,157870,216.239.34.10 -[73] 2016-10-20 15:23:59.090911 [#4 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:59.090911 [#4 dns.pcap 4095] \ [172.17.0.10].33916 [8.8.8.8].53 \ dns QUERY,NOERROR,45248,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:59.092204 [#5 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:59.092204 [#5 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].33916 \ dns QUERY,NOERROR,45248,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -769,11 +769,11 @@ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 \ ns2.google.com.,IN,A,157822,216.239.34.10 -[73] 2016-10-20 15:24:06.339145 [#6 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:06.339145 [#6 dns.pcap 4095] \ [172.17.0.10].58176 [8.8.8.8].53 \ dns QUERY,NOERROR,25433,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:06.340820 [#7 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:06.340820 [#7 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].58176 \ dns QUERY,NOERROR,25433,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -787,11 +787,11 @@ ns3.google.com.,IN,A,157814,216.239.36.10 \ ns4.google.com.,IN,A,157814,216.239.38.10 \ ns2.google.com.,IN,A,157814,216.239.34.10 -[73] 2016-10-20 15:24:07.353123 [#8 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:07.353123 [#8 dns.pcap 4095] \ [172.17.0.10].34607 [8.8.8.8].53 \ dns QUERY,NOERROR,8470,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:07.354682 [#9 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:07.354682 [#9 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].34607 \ dns QUERY,NOERROR,8470,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -805,11 +805,11 @@ ns3.google.com.,IN,A,157813,216.239.36.10 \ ns4.google.com.,IN,A,157813,216.239.38.10 \ ns2.google.com.,IN,A,157813,216.239.34.10 -[73] 2016-10-20 15:24:08.368516 [#10 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:08.368516 [#10 dns.pcap 4095] \ [172.17.0.10].37149 [8.8.8.8].53 \ dns QUERY,NOERROR,44985,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:08.370119 [#11 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:08.370119 [#11 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37149 \ dns QUERY,NOERROR,44985,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -823,11 +823,11 @@ ns3.google.com.,IN,A,157812,216.239.36.10 \ ns4.google.com.,IN,A,157812,216.239.38.10 \ ns2.google.com.,IN,A,157812,216.239.34.10 -[73] 2016-10-20 15:24:09.384057 [#12 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:09.384057 [#12 dns.pcap 4095] \ [172.17.0.10].52368 [8.8.8.8].53 \ dns QUERY,NOERROR,22980,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:09.385463 [#13 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:09.385463 [#13 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].52368 \ dns QUERY,NOERROR,22980,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -841,11 +841,11 @@ ns3.google.com.,IN,A,157811,216.239.36.10 \ ns4.google.com.,IN,A,157811,216.239.38.10 \ ns2.google.com.,IN,A,157811,216.239.34.10 -[73] 2016-10-20 15:24:10.398099 [#14 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:10.398099 [#14 dns.pcap 4095] \ [172.17.0.10].34426 [8.8.8.8].53 \ dns QUERY,NOERROR,25431,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:10.400317 [#15 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:10.400317 [#15 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].34426 \ dns QUERY,NOERROR,25431,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -859,11 +859,11 @@ ns3.google.com.,IN,A,157810,216.239.36.10 \ ns4.google.com.,IN,A,157810,216.239.38.10 \ ns2.google.com.,IN,A,157810,216.239.34.10 -[73] 2016-10-20 15:24:11.412133 [#16 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:11.412133 [#16 dns.pcap 4095] \ [172.17.0.10].51181 [8.8.8.8].53 \ dns QUERY,NOERROR,47411,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:11.413370 [#17 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:11.413370 [#17 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].51181 \ dns QUERY,NOERROR,47411,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -877,11 +877,11 @@ ns3.google.com.,IN,A,157809,216.239.36.10 \ ns4.google.com.,IN,A,157809,216.239.38.10 \ ns2.google.com.,IN,A,157809,216.239.34.10 -[73] 2016-10-20 15:24:18.452451 [#18 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:18.452451 [#18 dns.pcap 4095] \ [172.17.0.10].40224 [8.8.8.8].53 \ dns QUERY,NOERROR,60808,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:18.454030 [#19 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:18.454030 [#19 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40224 \ dns QUERY,NOERROR,60808,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -895,11 +895,11 @@ ns3.google.com.,IN,A,157802,216.239.36.10 \ ns4.google.com.,IN,A,157802,216.239.38.10 \ ns2.google.com.,IN,A,157802,216.239.34.10 -[73] 2016-10-20 15:24:19.467324 [#20 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:19.467324 [#20 dns.pcap 4095] \ [172.17.0.10].60457 [8.8.8.8].53 \ dns QUERY,NOERROR,25543,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:19.468895 [#21 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:19.468895 [#21 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60457 \ dns QUERY,NOERROR,25543,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -913,11 +913,11 @@ ns3.google.com.,IN,A,157801,216.239.36.10 \ ns4.google.com.,IN,A,157801,216.239.38.10 \ ns2.google.com.,IN,A,157801,216.239.34.10 -[73] 2016-10-20 15:24:20.482188 [#22 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:20.482188 [#22 dns.pcap 4095] \ [172.17.0.10].56022 [8.8.8.8].53 \ dns QUERY,NOERROR,25911,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:20.483927 [#23 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:20.483927 [#23 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].56022 \ dns QUERY,NOERROR,25911,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -931,11 +931,11 @@ ns3.google.com.,IN,A,157800,216.239.36.10 \ ns4.google.com.,IN,A,157800,216.239.38.10 \ ns2.google.com.,IN,A,157800,216.239.34.10 -[73] 2016-10-20 15:24:21.495324 [#24 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:21.495324 [#24 dns.pcap 4095] \ [172.17.0.10].42978 [8.8.8.8].53 \ dns QUERY,NOERROR,37698,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:21.496815 [#25 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:21.496815 [#25 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].42978 \ dns QUERY,NOERROR,37698,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -949,11 +949,11 @@ ns3.google.com.,IN,A,157799,216.239.36.10 \ ns4.google.com.,IN,A,157799,216.239.38.10 \ ns2.google.com.,IN,A,157799,216.239.34.10 -[73] 2016-10-20 15:24:22.510176 [#26 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:22.510176 [#26 dns.pcap 4095] \ [172.17.0.10].50599 [8.8.8.8].53 \ dns QUERY,NOERROR,32142,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:22.511746 [#27 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:22.511746 [#27 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].50599 \ dns QUERY,NOERROR,32142,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -967,11 +967,11 @@ ns3.google.com.,IN,A,157798,216.239.36.10 \ ns4.google.com.,IN,A,157798,216.239.38.10 \ ns2.google.com.,IN,A,157798,216.239.34.10 -[73] 2016-10-20 15:24:23.527449 [#28 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:23.527449 [#28 dns.pcap 4095] \ [172.17.0.10].60063 [8.8.8.8].53 \ dns QUERY,NOERROR,18886,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:23.529385 [#29 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:23.529385 [#29 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60063 \ dns QUERY,NOERROR,18886,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -985,11 +985,11 @@ ns3.google.com.,IN,A,157797,216.239.36.10 \ ns4.google.com.,IN,A,157797,216.239.38.10 \ ns2.google.com.,IN,A,157797,216.239.34.10 -[73] 2016-10-20 15:24:24.544538 [#30 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:24.544538 [#30 dns.pcap 4095] \ [172.17.0.10].60469 [8.8.8.8].53 \ dns QUERY,NOERROR,33139,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:24.546172 [#31 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:24.546172 [#31 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60469 \ dns QUERY,NOERROR,33139,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1003,11 +1003,11 @@ ns3.google.com.,IN,A,157796,216.239.36.10 \ ns4.google.com.,IN,A,157796,216.239.38.10 \ ns2.google.com.,IN,A,157796,216.239.34.10 -[73] 2016-10-20 15:24:25.562608 [#32 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:25.562608 [#32 dns.pcap 4095] \ [172.17.0.10].33507 [8.8.8.8].53 \ dns QUERY,NOERROR,59258,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:25.564509 [#33 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:25.564509 [#33 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].33507 \ dns QUERY,NOERROR,59258,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1022,11 +1022,11 @@ ns4.google.com.,IN,A,157795,216.239.38.10 \ ns2.google.com.,IN,A,157795,216.239.34.10 -- not PTR -[56] 2016-10-20 15:23:01.075993 [#0 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:01.075993 [#0 dns.pcap 4095] \ [172.17.0.10].53199 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:01.077982 [#1 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:01.077982 [#1 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53199 \ dns QUERY,NOERROR,59311,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1039,11 +1039,11 @@ ns1.google.com.,IN,A,331882,216.239.32.10 \ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 -[56] 2016-10-20 15:23:01.087291 [#2 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:01.087291 [#2 dns.pcap 4095] \ [172.17.0.10].40043 [8.8.8.8].53 \ dns QUERY,NOERROR,5337,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:01.088733 [#3 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:01.088733 [#3 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40043 \ dns QUERY,NOERROR,5337,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1056,11 +1056,11 @@ ns1.google.com.,IN,A,331882,216.239.32.10 \ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 -[56] 2016-10-20 15:23:10.322117 [#4 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:10.322117 [#4 dns.pcap 4095] \ [172.17.0.10].37953 [8.8.8.8].53 \ dns QUERY,NOERROR,22982,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:10.323399 [#5 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:10.323399 [#5 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37953 \ dns QUERY,NOERROR,22982,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1073,11 +1073,11 @@ ns1.google.com.,IN,A,331872,216.239.32.10 \ ns3.google.com.,IN,A,157870,216.239.36.10 \ ns4.google.com.,IN,A,157870,216.239.38.10 -[56] 2016-10-20 15:23:52.860937 [#6 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:52.860937 [#6 dns.pcap 4095] \ [172.17.0.10].40953 [8.8.8.8].53 \ dns QUERY,NOERROR,22531,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:52.863771 [#7 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:52.863771 [#7 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40953 \ dns QUERY,NOERROR,22531,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1090,11 +1090,11 @@ ns1.google.com.,IN,A,331830,216.239.32.10 \ ns3.google.com.,IN,A,157828,216.239.36.10 \ ns4.google.com.,IN,A,157828,216.239.38.10 -[56] 2016-10-20 15:23:59.083869 [#8 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:59.083869 [#8 dns.pcap 4095] \ [172.17.0.10].45174 [8.8.8.8].53 \ dns QUERY,NOERROR,58510,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:59.086104 [#9 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:59.086104 [#9 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45174 \ dns QUERY,NOERROR,58510,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1107,11 +1107,11 @@ ns1.google.com.,IN,A,331824,216.239.32.10 \ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 -[56] 2016-10-20 15:24:04.323868 [#10 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:04.323868 [#10 dns.pcap 4095] \ [172.17.0.10].43559 [8.8.8.8].53 \ dns QUERY,NOERROR,49483,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:04.325597 [#11 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:04.325597 [#11 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].43559 \ dns QUERY,NOERROR,49483,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1124,11 +1124,11 @@ ns1.google.com.,IN,A,331818,216.239.32.10 \ ns3.google.com.,IN,A,157816,216.239.36.10 \ ns4.google.com.,IN,A,157816,216.239.38.10 -[56] 2016-10-20 15:24:06.332239 [#12 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:06.332239 [#12 dns.pcap 4095] \ [172.17.0.10].54859 [8.8.8.8].53 \ dns QUERY,NOERROR,31669,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:06.333743 [#13 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:06.333743 [#13 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].54859 \ dns QUERY,NOERROR,31669,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1141,11 +1141,11 @@ ns1.google.com.,IN,A,331816,216.239.32.10 \ ns3.google.com.,IN,A,157814,216.239.36.10 \ ns4.google.com.,IN,A,157814,216.239.38.10 -[56] 2016-10-20 15:24:07.346429 [#14 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:07.346429 [#14 dns.pcap 4095] \ [172.17.0.10].41266 [8.8.8.8].53 \ dns QUERY,NOERROR,63798,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:07.348160 [#15 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:07.348160 [#15 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41266 \ dns QUERY,NOERROR,63798,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1158,11 +1158,11 @@ ns1.google.com.,IN,A,331815,216.239.32.10 \ ns3.google.com.,IN,A,157813,216.239.36.10 \ ns4.google.com.,IN,A,157813,216.239.38.10 -[56] 2016-10-20 15:24:08.360528 [#16 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:08.360528 [#16 dns.pcap 4095] \ [172.17.0.10].60437 [8.8.8.8].53 \ dns QUERY,NOERROR,60258,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:08.362206 [#17 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:08.362206 [#17 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60437 \ dns QUERY,NOERROR,60258,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1175,11 +1175,11 @@ ns1.google.com.,IN,A,331814,216.239.32.10 \ ns3.google.com.,IN,A,157812,216.239.36.10 \ ns4.google.com.,IN,A,157812,216.239.38.10 -[56] 2016-10-20 15:24:09.375942 [#18 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:09.375942 [#18 dns.pcap 4095] \ [172.17.0.10].53820 [8.8.8.8].53 \ dns QUERY,NOERROR,45512,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:09.378425 [#19 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:09.378425 [#19 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53820 \ dns QUERY,NOERROR,45512,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1192,11 +1192,11 @@ ns1.google.com.,IN,A,331813,216.239.32.10 \ ns3.google.com.,IN,A,157811,216.239.36.10 \ ns4.google.com.,IN,A,157811,216.239.38.10 -[56] 2016-10-20 15:24:10.391358 [#20 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:10.391358 [#20 dns.pcap 4095] \ [172.17.0.10].47637 [8.8.8.8].53 \ dns QUERY,NOERROR,1834,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:10.392886 [#21 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:10.392886 [#21 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].47637 \ dns QUERY,NOERROR,1834,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1209,11 +1209,11 @@ ns1.google.com.,IN,A,331812,216.239.32.10 \ ns3.google.com.,IN,A,157810,216.239.36.10 \ ns4.google.com.,IN,A,157810,216.239.38.10 -[56] 2016-10-20 15:24:11.406297 [#22 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:11.406297 [#22 dns.pcap 4095] \ [172.17.0.10].41059 [8.8.8.8].53 \ dns QUERY,NOERROR,48432,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:11.407460 [#23 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:11.407460 [#23 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41059 \ dns QUERY,NOERROR,48432,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1226,11 +1226,11 @@ ns1.google.com.,IN,A,331811,216.239.32.10 \ ns3.google.com.,IN,A,157809,216.239.36.10 \ ns4.google.com.,IN,A,157809,216.239.38.10 -[56] 2016-10-20 15:24:12.419936 [#24 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:12.419936 [#24 dns.pcap 4095] \ [172.17.0.10].32976 [8.8.8.8].53 \ dns QUERY,NOERROR,12038,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:12.421228 [#25 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:12.421228 [#25 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].32976 \ dns QUERY,NOERROR,12038,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1243,11 +1243,11 @@ ns1.google.com.,IN,A,331810,216.239.32.10 \ ns3.google.com.,IN,A,157808,216.239.36.10 \ ns4.google.com.,IN,A,157808,216.239.38.10 -[56] 2016-10-20 15:24:14.428524 [#26 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:14.428524 [#26 dns.pcap 4095] \ [172.17.0.10].53467 [8.8.8.8].53 \ dns QUERY,NOERROR,11614,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:14.429863 [#27 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:14.429863 [#27 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53467 \ dns QUERY,NOERROR,11614,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1260,11 +1260,11 @@ ns1.google.com.,IN,A,331808,216.239.32.10 \ ns3.google.com.,IN,A,157806,216.239.36.10 \ ns4.google.com.,IN,A,157806,216.239.38.10 -[56] 2016-10-20 15:24:16.435733 [#28 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:16.435733 [#28 dns.pcap 4095] \ [172.17.0.10].41532 [8.8.8.8].53 \ dns QUERY,NOERROR,59173,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:16.437471 [#29 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:16.437471 [#29 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41532 \ dns QUERY,NOERROR,59173,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1277,11 +1277,11 @@ ns1.google.com.,IN,A,331806,216.239.32.10 \ ns3.google.com.,IN,A,157804,216.239.36.10 \ ns4.google.com.,IN,A,157804,216.239.38.10 -[56] 2016-10-20 15:24:18.445519 [#30 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:18.445519 [#30 dns.pcap 4095] \ [172.17.0.10].44982 [8.8.8.8].53 \ dns QUERY,NOERROR,45535,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:18.446775 [#31 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:18.446775 [#31 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].44982 \ dns QUERY,NOERROR,45535,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1294,11 +1294,11 @@ ns1.google.com.,IN,A,331804,216.239.32.10 \ ns3.google.com.,IN,A,157802,216.239.36.10 \ ns4.google.com.,IN,A,157802,216.239.38.10 -[56] 2016-10-20 15:24:19.460087 [#32 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:19.460087 [#32 dns.pcap 4095] \ [172.17.0.10].45658 [8.8.8.8].53 \ dns QUERY,NOERROR,64325,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:19.462224 [#33 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:19.462224 [#33 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45658 \ dns QUERY,NOERROR,64325,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1311,11 +1311,11 @@ ns1.google.com.,IN,A,331803,216.239.32.10 \ ns3.google.com.,IN,A,157801,216.239.36.10 \ ns4.google.com.,IN,A,157801,216.239.38.10 -[56] 2016-10-20 15:24:20.475086 [#34 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:20.475086 [#34 dns.pcap 4095] \ [172.17.0.10].59762 [8.8.8.8].53 \ dns QUERY,NOERROR,20736,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:20.476841 [#35 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:20.476841 [#35 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].59762 \ dns QUERY,NOERROR,20736,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1328,11 +1328,11 @@ ns1.google.com.,IN,A,331802,216.239.32.10 \ ns3.google.com.,IN,A,157800,216.239.36.10 \ ns4.google.com.,IN,A,157800,216.239.38.10 -[56] 2016-10-20 15:24:21.489468 [#36 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:21.489468 [#36 dns.pcap 4095] \ [172.17.0.10].37669 [8.8.8.8].53 \ dns QUERY,NOERROR,64358,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:21.490573 [#37 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:21.490573 [#37 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37669 \ dns QUERY,NOERROR,64358,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1345,11 +1345,11 @@ ns1.google.com.,IN,A,331801,216.239.32.10 \ ns3.google.com.,IN,A,157799,216.239.36.10 \ ns4.google.com.,IN,A,157799,216.239.38.10 -[56] 2016-10-20 15:24:22.502667 [#38 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:22.502667 [#38 dns.pcap 4095] \ [172.17.0.10].49829 [8.8.8.8].53 \ dns QUERY,NOERROR,54706,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:22.504738 [#39 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:22.504738 [#39 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].49829 \ dns QUERY,NOERROR,54706,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1362,11 +1362,11 @@ ns1.google.com.,IN,A,331800,216.239.32.10 \ ns3.google.com.,IN,A,157798,216.239.36.10 \ ns4.google.com.,IN,A,157798,216.239.38.10 -[56] 2016-10-20 15:24:23.520203 [#40 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:23.520203 [#40 dns.pcap 4095] \ [172.17.0.10].44980 [8.8.8.8].53 \ dns QUERY,NOERROR,41808,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:23.521976 [#41 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:23.521976 [#41 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].44980 \ dns QUERY,NOERROR,41808,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1379,11 +1379,11 @@ ns1.google.com.,IN,A,331799,216.239.32.10 \ ns3.google.com.,IN,A,157797,216.239.36.10 \ ns4.google.com.,IN,A,157797,216.239.38.10 -[56] 2016-10-20 15:24:24.537264 [#42 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:24.537264 [#42 dns.pcap 4095] \ [172.17.0.10].42042 [8.8.8.8].53 \ dns QUERY,NOERROR,10624,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:24.539398 [#43 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:24.539398 [#43 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].42042 \ dns QUERY,NOERROR,10624,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1396,11 +1396,11 @@ ns1.google.com.,IN,A,331798,216.239.32.10 \ ns3.google.com.,IN,A,157796,216.239.36.10 \ ns4.google.com.,IN,A,157796,216.239.38.10 -[56] 2016-10-20 15:24:25.554744 [#44 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:25.554744 [#44 dns.pcap 4095] \ [172.17.0.10].45703 [8.8.8.8].53 \ dns QUERY,NOERROR,61415,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:25.556513 [#45 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:25.556513 [#45 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45703 \ dns QUERY,NOERROR,61415,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1413,11 +1413,11 @@ ns1.google.com.,IN,A,331797,216.239.32.10 \ ns3.google.com.,IN,A,157795,216.239.36.10 \ ns4.google.com.,IN,A,157795,216.239.38.10 -[56] 2016-10-20 15:24:26.572784 [#46 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:26.572784 [#46 dns.pcap 4095] \ [172.17.0.10].46798 [8.8.8.8].53 \ dns QUERY,NOERROR,17700,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:26.574350 [#47 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:26.574350 [#47 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].46798 \ dns QUERY,NOERROR,17700,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1431,11 +1431,11 @@ ns3.google.com.,IN,A,157794,216.239.36.10 \ ns4.google.com.,IN,A,157794,216.239.38.10 -- only 1 -[56] 2016-10-20 15:23:01.075993 [#0 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:01.075993 [#0 dns.pcap 4095] \ [172.17.0.10].53199 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:01.077982 [#1 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:01.077982 [#1 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53199 \ dns QUERY,NOERROR,59311,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1448,11 +1448,11 @@ ns1.google.com.,IN,A,331882,216.239.32.10 \ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 -[56] 2016-10-20 15:23:01.087291 [#2 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:01.087291 [#2 dns.pcap 4095] \ [172.17.0.10].40043 [8.8.8.8].53 \ dns QUERY,NOERROR,5337,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:01.088733 [#3 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:01.088733 [#3 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40043 \ dns QUERY,NOERROR,5337,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1465,11 +1465,11 @@ ns1.google.com.,IN,A,331882,216.239.32.10 \ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 -[56] 2016-10-20 15:23:10.322117 [#4 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:10.322117 [#4 dns.pcap 4095] \ [172.17.0.10].37953 [8.8.8.8].53 \ dns QUERY,NOERROR,22982,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:10.323399 [#5 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:10.323399 [#5 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37953 \ dns QUERY,NOERROR,22982,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1482,11 +1482,11 @@ ns1.google.com.,IN,A,331872,216.239.32.10 \ ns3.google.com.,IN,A,157870,216.239.36.10 \ ns4.google.com.,IN,A,157870,216.239.38.10 -[56] 2016-10-20 15:23:52.860937 [#6 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:52.860937 [#6 dns.pcap 4095] \ [172.17.0.10].40953 [8.8.8.8].53 \ dns QUERY,NOERROR,22531,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:52.863771 [#7 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:52.863771 [#7 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40953 \ dns QUERY,NOERROR,22531,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1499,11 +1499,11 @@ ns1.google.com.,IN,A,331830,216.239.32.10 \ ns3.google.com.,IN,A,157828,216.239.36.10 \ ns4.google.com.,IN,A,157828,216.239.38.10 -[56] 2016-10-20 15:23:59.083869 [#8 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:59.083869 [#8 dns.pcap 4095] \ [172.17.0.10].45174 [8.8.8.8].53 \ dns QUERY,NOERROR,58510,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:59.086104 [#9 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:59.086104 [#9 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45174 \ dns QUERY,NOERROR,58510,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1516,11 +1516,11 @@ ns1.google.com.,IN,A,331824,216.239.32.10 \ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 -[56] 2016-10-20 15:24:04.323868 [#10 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:04.323868 [#10 dns.pcap 4095] \ [172.17.0.10].43559 [8.8.8.8].53 \ dns QUERY,NOERROR,49483,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:04.325597 [#11 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:04.325597 [#11 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].43559 \ dns QUERY,NOERROR,49483,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1533,11 +1533,11 @@ ns1.google.com.,IN,A,331818,216.239.32.10 \ ns3.google.com.,IN,A,157816,216.239.36.10 \ ns4.google.com.,IN,A,157816,216.239.38.10 -[56] 2016-10-20 15:24:06.332239 [#12 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:06.332239 [#12 dns.pcap 4095] \ [172.17.0.10].54859 [8.8.8.8].53 \ dns QUERY,NOERROR,31669,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:06.333743 [#13 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:06.333743 [#13 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].54859 \ dns QUERY,NOERROR,31669,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1550,11 +1550,11 @@ ns1.google.com.,IN,A,331816,216.239.32.10 \ ns3.google.com.,IN,A,157814,216.239.36.10 \ ns4.google.com.,IN,A,157814,216.239.38.10 -[56] 2016-10-20 15:24:07.346429 [#14 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:07.346429 [#14 dns.pcap 4095] \ [172.17.0.10].41266 [8.8.8.8].53 \ dns QUERY,NOERROR,63798,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:07.348160 [#15 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:07.348160 [#15 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41266 \ dns QUERY,NOERROR,63798,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1567,11 +1567,11 @@ ns1.google.com.,IN,A,331815,216.239.32.10 \ ns3.google.com.,IN,A,157813,216.239.36.10 \ ns4.google.com.,IN,A,157813,216.239.38.10 -[56] 2016-10-20 15:24:08.360528 [#16 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:08.360528 [#16 dns.pcap 4095] \ [172.17.0.10].60437 [8.8.8.8].53 \ dns QUERY,NOERROR,60258,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:08.362206 [#17 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:08.362206 [#17 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60437 \ dns QUERY,NOERROR,60258,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1584,11 +1584,11 @@ ns1.google.com.,IN,A,331814,216.239.32.10 \ ns3.google.com.,IN,A,157812,216.239.36.10 \ ns4.google.com.,IN,A,157812,216.239.38.10 -[56] 2016-10-20 15:24:09.375942 [#18 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:09.375942 [#18 dns.pcap 4095] \ [172.17.0.10].53820 [8.8.8.8].53 \ dns QUERY,NOERROR,45512,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:09.378425 [#19 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:09.378425 [#19 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53820 \ dns QUERY,NOERROR,45512,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1601,11 +1601,11 @@ ns1.google.com.,IN,A,331813,216.239.32.10 \ ns3.google.com.,IN,A,157811,216.239.36.10 \ ns4.google.com.,IN,A,157811,216.239.38.10 -[56] 2016-10-20 15:24:10.391358 [#20 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:10.391358 [#20 dns.pcap 4095] \ [172.17.0.10].47637 [8.8.8.8].53 \ dns QUERY,NOERROR,1834,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:10.392886 [#21 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:10.392886 [#21 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].47637 \ dns QUERY,NOERROR,1834,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1618,11 +1618,11 @@ ns1.google.com.,IN,A,331812,216.239.32.10 \ ns3.google.com.,IN,A,157810,216.239.36.10 \ ns4.google.com.,IN,A,157810,216.239.38.10 -[56] 2016-10-20 15:24:11.406297 [#22 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:11.406297 [#22 dns.pcap 4095] \ [172.17.0.10].41059 [8.8.8.8].53 \ dns QUERY,NOERROR,48432,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:11.407460 [#23 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:11.407460 [#23 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41059 \ dns QUERY,NOERROR,48432,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1635,11 +1635,11 @@ ns1.google.com.,IN,A,331811,216.239.32.10 \ ns3.google.com.,IN,A,157809,216.239.36.10 \ ns4.google.com.,IN,A,157809,216.239.38.10 -[56] 2016-10-20 15:24:12.419936 [#24 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:12.419936 [#24 dns.pcap 4095] \ [172.17.0.10].32976 [8.8.8.8].53 \ dns QUERY,NOERROR,12038,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:12.421228 [#25 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:12.421228 [#25 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].32976 \ dns QUERY,NOERROR,12038,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1652,11 +1652,11 @@ ns1.google.com.,IN,A,331810,216.239.32.10 \ ns3.google.com.,IN,A,157808,216.239.36.10 \ ns4.google.com.,IN,A,157808,216.239.38.10 -[56] 2016-10-20 15:24:14.428524 [#26 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:14.428524 [#26 dns.pcap 4095] \ [172.17.0.10].53467 [8.8.8.8].53 \ dns QUERY,NOERROR,11614,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:14.429863 [#27 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:14.429863 [#27 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53467 \ dns QUERY,NOERROR,11614,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1669,11 +1669,11 @@ ns1.google.com.,IN,A,331808,216.239.32.10 \ ns3.google.com.,IN,A,157806,216.239.36.10 \ ns4.google.com.,IN,A,157806,216.239.38.10 -[56] 2016-10-20 15:24:16.435733 [#28 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:16.435733 [#28 dns.pcap 4095] \ [172.17.0.10].41532 [8.8.8.8].53 \ dns QUERY,NOERROR,59173,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:16.437471 [#29 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:16.437471 [#29 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41532 \ dns QUERY,NOERROR,59173,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1686,11 +1686,11 @@ ns1.google.com.,IN,A,331806,216.239.32.10 \ ns3.google.com.,IN,A,157804,216.239.36.10 \ ns4.google.com.,IN,A,157804,216.239.38.10 -[56] 2016-10-20 15:24:18.445519 [#30 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:18.445519 [#30 dns.pcap 4095] \ [172.17.0.10].44982 [8.8.8.8].53 \ dns QUERY,NOERROR,45535,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:18.446775 [#31 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:18.446775 [#31 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].44982 \ dns QUERY,NOERROR,45535,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1703,11 +1703,11 @@ ns1.google.com.,IN,A,331804,216.239.32.10 \ ns3.google.com.,IN,A,157802,216.239.36.10 \ ns4.google.com.,IN,A,157802,216.239.38.10 -[56] 2016-10-20 15:24:19.460087 [#32 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:19.460087 [#32 dns.pcap 4095] \ [172.17.0.10].45658 [8.8.8.8].53 \ dns QUERY,NOERROR,64325,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:19.462224 [#33 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:19.462224 [#33 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45658 \ dns QUERY,NOERROR,64325,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1720,11 +1720,11 @@ ns1.google.com.,IN,A,331803,216.239.32.10 \ ns3.google.com.,IN,A,157801,216.239.36.10 \ ns4.google.com.,IN,A,157801,216.239.38.10 -[56] 2016-10-20 15:24:20.475086 [#34 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:20.475086 [#34 dns.pcap 4095] \ [172.17.0.10].59762 [8.8.8.8].53 \ dns QUERY,NOERROR,20736,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:20.476841 [#35 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:20.476841 [#35 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].59762 \ dns QUERY,NOERROR,20736,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1737,11 +1737,11 @@ ns1.google.com.,IN,A,331802,216.239.32.10 \ ns3.google.com.,IN,A,157800,216.239.36.10 \ ns4.google.com.,IN,A,157800,216.239.38.10 -[56] 2016-10-20 15:24:21.489468 [#36 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:21.489468 [#36 dns.pcap 4095] \ [172.17.0.10].37669 [8.8.8.8].53 \ dns QUERY,NOERROR,64358,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:21.490573 [#37 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:21.490573 [#37 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37669 \ dns QUERY,NOERROR,64358,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1754,11 +1754,11 @@ ns1.google.com.,IN,A,331801,216.239.32.10 \ ns3.google.com.,IN,A,157799,216.239.36.10 \ ns4.google.com.,IN,A,157799,216.239.38.10 -[56] 2016-10-20 15:24:22.502667 [#38 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:22.502667 [#38 dns.pcap 4095] \ [172.17.0.10].49829 [8.8.8.8].53 \ dns QUERY,NOERROR,54706,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:22.504738 [#39 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:22.504738 [#39 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].49829 \ dns QUERY,NOERROR,54706,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1771,11 +1771,11 @@ ns1.google.com.,IN,A,331800,216.239.32.10 \ ns3.google.com.,IN,A,157798,216.239.36.10 \ ns4.google.com.,IN,A,157798,216.239.38.10 -[56] 2016-10-20 15:24:23.520203 [#40 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:23.520203 [#40 dns.pcap 4095] \ [172.17.0.10].44980 [8.8.8.8].53 \ dns QUERY,NOERROR,41808,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:23.521976 [#41 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:23.521976 [#41 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].44980 \ dns QUERY,NOERROR,41808,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1788,11 +1788,11 @@ ns1.google.com.,IN,A,331799,216.239.32.10 \ ns3.google.com.,IN,A,157797,216.239.36.10 \ ns4.google.com.,IN,A,157797,216.239.38.10 -[56] 2016-10-20 15:24:24.537264 [#42 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:24.537264 [#42 dns.pcap 4095] \ [172.17.0.10].42042 [8.8.8.8].53 \ dns QUERY,NOERROR,10624,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:24.539398 [#43 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:24.539398 [#43 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].42042 \ dns QUERY,NOERROR,10624,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1805,11 +1805,11 @@ ns1.google.com.,IN,A,331798,216.239.32.10 \ ns3.google.com.,IN,A,157796,216.239.36.10 \ ns4.google.com.,IN,A,157796,216.239.38.10 -[56] 2016-10-20 15:24:25.554744 [#44 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:25.554744 [#44 dns.pcap 4095] \ [172.17.0.10].45703 [8.8.8.8].53 \ dns QUERY,NOERROR,61415,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:25.556513 [#45 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:25.556513 [#45 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45703 \ dns QUERY,NOERROR,61415,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1822,11 +1822,11 @@ ns1.google.com.,IN,A,331797,216.239.32.10 \ ns3.google.com.,IN,A,157795,216.239.36.10 \ ns4.google.com.,IN,A,157795,216.239.38.10 -[56] 2016-10-20 15:24:26.572784 [#46 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:26.572784 [#46 dns.pcap 4095] \ [172.17.0.10].46798 [8.8.8.8].53 \ dns QUERY,NOERROR,17700,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:26.574350 [#47 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:26.574350 [#47 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].46798 \ dns QUERY,NOERROR,17700,qr|rd|ra \ 1 google.com.,IN,A \ @@ -1840,11 +1840,11 @@ ns3.google.com.,IN,A,157794,216.239.36.10 \ ns4.google.com.,IN,A,157794,216.239.38.10 -- not 1 -[73] 2016-10-20 15:23:01.082865 [#0 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:01.082865 [#0 dns.pcap 4095] \ [172.17.0.10].57822 [8.8.8.8].53 \ dns QUERY,NOERROR,35665,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:01.084107 [#1 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:01.084107 [#1 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].57822 \ dns QUERY,NOERROR,35665,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1858,11 +1858,11 @@ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 \ ns2.google.com.,IN,A,157880,216.239.34.10 -[73] 2016-10-20 15:23:10.328324 [#2 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:10.328324 [#2 dns.pcap 4095] \ [172.17.0.10].48658 [8.8.8.8].53 \ dns QUERY,NOERROR,18718,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:10.329572 [#3 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:10.329572 [#3 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].48658 \ dns QUERY,NOERROR,18718,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1876,11 +1876,11 @@ ns3.google.com.,IN,A,157870,216.239.36.10 \ ns4.google.com.,IN,A,157870,216.239.38.10 \ ns2.google.com.,IN,A,157870,216.239.34.10 -[73] 2016-10-20 15:23:59.090911 [#4 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:59.090911 [#4 dns.pcap 4095] \ [172.17.0.10].33916 [8.8.8.8].53 \ dns QUERY,NOERROR,45248,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:59.092204 [#5 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:59.092204 [#5 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].33916 \ dns QUERY,NOERROR,45248,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1894,11 +1894,11 @@ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 \ ns2.google.com.,IN,A,157822,216.239.34.10 -[73] 2016-10-20 15:24:06.339145 [#6 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:06.339145 [#6 dns.pcap 4095] \ [172.17.0.10].58176 [8.8.8.8].53 \ dns QUERY,NOERROR,25433,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:06.340820 [#7 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:06.340820 [#7 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].58176 \ dns QUERY,NOERROR,25433,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1912,11 +1912,11 @@ ns3.google.com.,IN,A,157814,216.239.36.10 \ ns4.google.com.,IN,A,157814,216.239.38.10 \ ns2.google.com.,IN,A,157814,216.239.34.10 -[73] 2016-10-20 15:24:07.353123 [#8 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:07.353123 [#8 dns.pcap 4095] \ [172.17.0.10].34607 [8.8.8.8].53 \ dns QUERY,NOERROR,8470,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:07.354682 [#9 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:07.354682 [#9 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].34607 \ dns QUERY,NOERROR,8470,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1930,11 +1930,11 @@ ns3.google.com.,IN,A,157813,216.239.36.10 \ ns4.google.com.,IN,A,157813,216.239.38.10 \ ns2.google.com.,IN,A,157813,216.239.34.10 -[73] 2016-10-20 15:24:08.368516 [#10 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:08.368516 [#10 dns.pcap 4095] \ [172.17.0.10].37149 [8.8.8.8].53 \ dns QUERY,NOERROR,44985,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:08.370119 [#11 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:08.370119 [#11 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37149 \ dns QUERY,NOERROR,44985,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1948,11 +1948,11 @@ ns3.google.com.,IN,A,157812,216.239.36.10 \ ns4.google.com.,IN,A,157812,216.239.38.10 \ ns2.google.com.,IN,A,157812,216.239.34.10 -[73] 2016-10-20 15:24:09.384057 [#12 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:09.384057 [#12 dns.pcap 4095] \ [172.17.0.10].52368 [8.8.8.8].53 \ dns QUERY,NOERROR,22980,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:09.385463 [#13 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:09.385463 [#13 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].52368 \ dns QUERY,NOERROR,22980,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1966,11 +1966,11 @@ ns3.google.com.,IN,A,157811,216.239.36.10 \ ns4.google.com.,IN,A,157811,216.239.38.10 \ ns2.google.com.,IN,A,157811,216.239.34.10 -[73] 2016-10-20 15:24:10.398099 [#14 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:10.398099 [#14 dns.pcap 4095] \ [172.17.0.10].34426 [8.8.8.8].53 \ dns QUERY,NOERROR,25431,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:10.400317 [#15 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:10.400317 [#15 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].34426 \ dns QUERY,NOERROR,25431,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1984,11 +1984,11 @@ ns3.google.com.,IN,A,157810,216.239.36.10 \ ns4.google.com.,IN,A,157810,216.239.38.10 \ ns2.google.com.,IN,A,157810,216.239.34.10 -[73] 2016-10-20 15:24:11.412133 [#16 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:11.412133 [#16 dns.pcap 4095] \ [172.17.0.10].51181 [8.8.8.8].53 \ dns QUERY,NOERROR,47411,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:11.413370 [#17 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:11.413370 [#17 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].51181 \ dns QUERY,NOERROR,47411,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2002,11 +2002,11 @@ ns3.google.com.,IN,A,157809,216.239.36.10 \ ns4.google.com.,IN,A,157809,216.239.38.10 \ ns2.google.com.,IN,A,157809,216.239.34.10 -[73] 2016-10-20 15:24:18.452451 [#18 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:18.452451 [#18 dns.pcap 4095] \ [172.17.0.10].40224 [8.8.8.8].53 \ dns QUERY,NOERROR,60808,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:18.454030 [#19 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:18.454030 [#19 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40224 \ dns QUERY,NOERROR,60808,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2020,11 +2020,11 @@ ns3.google.com.,IN,A,157802,216.239.36.10 \ ns4.google.com.,IN,A,157802,216.239.38.10 \ ns2.google.com.,IN,A,157802,216.239.34.10 -[73] 2016-10-20 15:24:19.467324 [#20 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:19.467324 [#20 dns.pcap 4095] \ [172.17.0.10].60457 [8.8.8.8].53 \ dns QUERY,NOERROR,25543,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:19.468895 [#21 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:19.468895 [#21 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60457 \ dns QUERY,NOERROR,25543,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2038,11 +2038,11 @@ ns3.google.com.,IN,A,157801,216.239.36.10 \ ns4.google.com.,IN,A,157801,216.239.38.10 \ ns2.google.com.,IN,A,157801,216.239.34.10 -[73] 2016-10-20 15:24:20.482188 [#22 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:20.482188 [#22 dns.pcap 4095] \ [172.17.0.10].56022 [8.8.8.8].53 \ dns QUERY,NOERROR,25911,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:20.483927 [#23 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:20.483927 [#23 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].56022 \ dns QUERY,NOERROR,25911,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2056,11 +2056,11 @@ ns3.google.com.,IN,A,157800,216.239.36.10 \ ns4.google.com.,IN,A,157800,216.239.38.10 \ ns2.google.com.,IN,A,157800,216.239.34.10 -[73] 2016-10-20 15:24:21.495324 [#24 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:21.495324 [#24 dns.pcap 4095] \ [172.17.0.10].42978 [8.8.8.8].53 \ dns QUERY,NOERROR,37698,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:21.496815 [#25 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:21.496815 [#25 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].42978 \ dns QUERY,NOERROR,37698,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2074,11 +2074,11 @@ ns3.google.com.,IN,A,157799,216.239.36.10 \ ns4.google.com.,IN,A,157799,216.239.38.10 \ ns2.google.com.,IN,A,157799,216.239.34.10 -[73] 2016-10-20 15:24:22.510176 [#26 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:22.510176 [#26 dns.pcap 4095] \ [172.17.0.10].50599 [8.8.8.8].53 \ dns QUERY,NOERROR,32142,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:22.511746 [#27 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:22.511746 [#27 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].50599 \ dns QUERY,NOERROR,32142,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2092,11 +2092,11 @@ ns3.google.com.,IN,A,157798,216.239.36.10 \ ns4.google.com.,IN,A,157798,216.239.38.10 \ ns2.google.com.,IN,A,157798,216.239.34.10 -[73] 2016-10-20 15:24:23.527449 [#28 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:23.527449 [#28 dns.pcap 4095] \ [172.17.0.10].60063 [8.8.8.8].53 \ dns QUERY,NOERROR,18886,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:23.529385 [#29 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:23.529385 [#29 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60063 \ dns QUERY,NOERROR,18886,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2110,11 +2110,11 @@ ns3.google.com.,IN,A,157797,216.239.36.10 \ ns4.google.com.,IN,A,157797,216.239.38.10 \ ns2.google.com.,IN,A,157797,216.239.34.10 -[73] 2016-10-20 15:24:24.544538 [#30 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:24.544538 [#30 dns.pcap 4095] \ [172.17.0.10].60469 [8.8.8.8].53 \ dns QUERY,NOERROR,33139,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:24.546172 [#31 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:24.546172 [#31 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60469 \ dns QUERY,NOERROR,33139,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2128,11 +2128,11 @@ ns3.google.com.,IN,A,157796,216.239.36.10 \ ns4.google.com.,IN,A,157796,216.239.38.10 \ ns2.google.com.,IN,A,157796,216.239.34.10 -[73] 2016-10-20 15:24:25.562608 [#32 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:25.562608 [#32 dns.pcap 4095] \ [172.17.0.10].33507 [8.8.8.8].53 \ dns QUERY,NOERROR,59258,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:25.564509 [#33 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:25.564509 [#33 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].33507 \ dns QUERY,NOERROR,59258,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2147,11 +2147,11 @@ ns4.google.com.,IN,A,157795,216.239.38.10 \ ns2.google.com.,IN,A,157795,216.239.34.10 -- only PTR -[73] 2016-10-20 15:23:01.082865 [#0 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:01.082865 [#0 dns.pcap 4095] \ [172.17.0.10].57822 [8.8.8.8].53 \ dns QUERY,NOERROR,35665,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:01.084107 [#1 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:01.084107 [#1 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].57822 \ dns QUERY,NOERROR,35665,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2165,11 +2165,11 @@ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 \ ns2.google.com.,IN,A,157880,216.239.34.10 -[73] 2016-10-20 15:23:10.328324 [#2 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:10.328324 [#2 dns.pcap 4095] \ [172.17.0.10].48658 [8.8.8.8].53 \ dns QUERY,NOERROR,18718,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:10.329572 [#3 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:10.329572 [#3 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].48658 \ dns QUERY,NOERROR,18718,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2183,11 +2183,11 @@ ns3.google.com.,IN,A,157870,216.239.36.10 \ ns4.google.com.,IN,A,157870,216.239.38.10 \ ns2.google.com.,IN,A,157870,216.239.34.10 -[73] 2016-10-20 15:23:59.090911 [#4 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:59.090911 [#4 dns.pcap 4095] \ [172.17.0.10].33916 [8.8.8.8].53 \ dns QUERY,NOERROR,45248,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:59.092204 [#5 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:59.092204 [#5 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].33916 \ dns QUERY,NOERROR,45248,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2201,11 +2201,11 @@ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 \ ns2.google.com.,IN,A,157822,216.239.34.10 -[73] 2016-10-20 15:24:06.339145 [#6 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:06.339145 [#6 dns.pcap 4095] \ [172.17.0.10].58176 [8.8.8.8].53 \ dns QUERY,NOERROR,25433,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:06.340820 [#7 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:06.340820 [#7 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].58176 \ dns QUERY,NOERROR,25433,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2219,11 +2219,11 @@ ns3.google.com.,IN,A,157814,216.239.36.10 \ ns4.google.com.,IN,A,157814,216.239.38.10 \ ns2.google.com.,IN,A,157814,216.239.34.10 -[73] 2016-10-20 15:24:07.353123 [#8 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:07.353123 [#8 dns.pcap 4095] \ [172.17.0.10].34607 [8.8.8.8].53 \ dns QUERY,NOERROR,8470,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:07.354682 [#9 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:07.354682 [#9 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].34607 \ dns QUERY,NOERROR,8470,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2237,11 +2237,11 @@ ns3.google.com.,IN,A,157813,216.239.36.10 \ ns4.google.com.,IN,A,157813,216.239.38.10 \ ns2.google.com.,IN,A,157813,216.239.34.10 -[73] 2016-10-20 15:24:08.368516 [#10 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:08.368516 [#10 dns.pcap 4095] \ [172.17.0.10].37149 [8.8.8.8].53 \ dns QUERY,NOERROR,44985,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:08.370119 [#11 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:08.370119 [#11 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37149 \ dns QUERY,NOERROR,44985,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2255,11 +2255,11 @@ ns3.google.com.,IN,A,157812,216.239.36.10 \ ns4.google.com.,IN,A,157812,216.239.38.10 \ ns2.google.com.,IN,A,157812,216.239.34.10 -[73] 2016-10-20 15:24:09.384057 [#12 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:09.384057 [#12 dns.pcap 4095] \ [172.17.0.10].52368 [8.8.8.8].53 \ dns QUERY,NOERROR,22980,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:09.385463 [#13 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:09.385463 [#13 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].52368 \ dns QUERY,NOERROR,22980,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2273,11 +2273,11 @@ ns3.google.com.,IN,A,157811,216.239.36.10 \ ns4.google.com.,IN,A,157811,216.239.38.10 \ ns2.google.com.,IN,A,157811,216.239.34.10 -[73] 2016-10-20 15:24:10.398099 [#14 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:10.398099 [#14 dns.pcap 4095] \ [172.17.0.10].34426 [8.8.8.8].53 \ dns QUERY,NOERROR,25431,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:10.400317 [#15 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:10.400317 [#15 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].34426 \ dns QUERY,NOERROR,25431,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2291,11 +2291,11 @@ ns3.google.com.,IN,A,157810,216.239.36.10 \ ns4.google.com.,IN,A,157810,216.239.38.10 \ ns2.google.com.,IN,A,157810,216.239.34.10 -[73] 2016-10-20 15:24:11.412133 [#16 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:11.412133 [#16 dns.pcap 4095] \ [172.17.0.10].51181 [8.8.8.8].53 \ dns QUERY,NOERROR,47411,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:11.413370 [#17 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:11.413370 [#17 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].51181 \ dns QUERY,NOERROR,47411,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2309,11 +2309,11 @@ ns3.google.com.,IN,A,157809,216.239.36.10 \ ns4.google.com.,IN,A,157809,216.239.38.10 \ ns2.google.com.,IN,A,157809,216.239.34.10 -[73] 2016-10-20 15:24:18.452451 [#18 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:18.452451 [#18 dns.pcap 4095] \ [172.17.0.10].40224 [8.8.8.8].53 \ dns QUERY,NOERROR,60808,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:18.454030 [#19 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:18.454030 [#19 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40224 \ dns QUERY,NOERROR,60808,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2327,11 +2327,11 @@ ns3.google.com.,IN,A,157802,216.239.36.10 \ ns4.google.com.,IN,A,157802,216.239.38.10 \ ns2.google.com.,IN,A,157802,216.239.34.10 -[73] 2016-10-20 15:24:19.467324 [#20 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:19.467324 [#20 dns.pcap 4095] \ [172.17.0.10].60457 [8.8.8.8].53 \ dns QUERY,NOERROR,25543,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:19.468895 [#21 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:19.468895 [#21 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60457 \ dns QUERY,NOERROR,25543,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2345,11 +2345,11 @@ ns3.google.com.,IN,A,157801,216.239.36.10 \ ns4.google.com.,IN,A,157801,216.239.38.10 \ ns2.google.com.,IN,A,157801,216.239.34.10 -[73] 2016-10-20 15:24:20.482188 [#22 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:20.482188 [#22 dns.pcap 4095] \ [172.17.0.10].56022 [8.8.8.8].53 \ dns QUERY,NOERROR,25911,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:20.483927 [#23 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:20.483927 [#23 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].56022 \ dns QUERY,NOERROR,25911,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2363,11 +2363,11 @@ ns3.google.com.,IN,A,157800,216.239.36.10 \ ns4.google.com.,IN,A,157800,216.239.38.10 \ ns2.google.com.,IN,A,157800,216.239.34.10 -[73] 2016-10-20 15:24:21.495324 [#24 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:21.495324 [#24 dns.pcap 4095] \ [172.17.0.10].42978 [8.8.8.8].53 \ dns QUERY,NOERROR,37698,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:21.496815 [#25 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:21.496815 [#25 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].42978 \ dns QUERY,NOERROR,37698,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2381,11 +2381,11 @@ ns3.google.com.,IN,A,157799,216.239.36.10 \ ns4.google.com.,IN,A,157799,216.239.38.10 \ ns2.google.com.,IN,A,157799,216.239.34.10 -[73] 2016-10-20 15:24:22.510176 [#26 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:22.510176 [#26 dns.pcap 4095] \ [172.17.0.10].50599 [8.8.8.8].53 \ dns QUERY,NOERROR,32142,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:22.511746 [#27 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:22.511746 [#27 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].50599 \ dns QUERY,NOERROR,32142,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2399,11 +2399,11 @@ ns3.google.com.,IN,A,157798,216.239.36.10 \ ns4.google.com.,IN,A,157798,216.239.38.10 \ ns2.google.com.,IN,A,157798,216.239.34.10 -[73] 2016-10-20 15:24:23.527449 [#28 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:23.527449 [#28 dns.pcap 4095] \ [172.17.0.10].60063 [8.8.8.8].53 \ dns QUERY,NOERROR,18886,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:23.529385 [#29 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:23.529385 [#29 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60063 \ dns QUERY,NOERROR,18886,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2417,11 +2417,11 @@ ns3.google.com.,IN,A,157797,216.239.36.10 \ ns4.google.com.,IN,A,157797,216.239.38.10 \ ns2.google.com.,IN,A,157797,216.239.34.10 -[73] 2016-10-20 15:24:24.544538 [#30 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:24.544538 [#30 dns.pcap 4095] \ [172.17.0.10].60469 [8.8.8.8].53 \ dns QUERY,NOERROR,33139,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:24.546172 [#31 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:24.546172 [#31 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60469 \ dns QUERY,NOERROR,33139,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2435,11 +2435,11 @@ ns3.google.com.,IN,A,157796,216.239.36.10 \ ns4.google.com.,IN,A,157796,216.239.38.10 \ ns2.google.com.,IN,A,157796,216.239.34.10 -[73] 2016-10-20 15:24:25.562608 [#32 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:25.562608 [#32 dns.pcap 4095] \ [172.17.0.10].33507 [8.8.8.8].53 \ dns QUERY,NOERROR,59258,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:25.564509 [#33 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:25.564509 [#33 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].33507 \ dns QUERY,NOERROR,59258,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -2454,11 +2454,11 @@ ns4.google.com.,IN,A,157795,216.239.38.10 \ ns2.google.com.,IN,A,157795,216.239.34.10 -- not PTR -[56] 2016-10-20 15:23:01.075993 [#0 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:01.075993 [#0 dns.pcap 4095] \ [172.17.0.10].53199 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:01.077982 [#1 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:01.077982 [#1 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53199 \ dns QUERY,NOERROR,59311,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2471,11 +2471,11 @@ ns1.google.com.,IN,A,331882,216.239.32.10 \ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 -[56] 2016-10-20 15:23:01.087291 [#2 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:01.087291 [#2 dns.pcap 4095] \ [172.17.0.10].40043 [8.8.8.8].53 \ dns QUERY,NOERROR,5337,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:01.088733 [#3 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:01.088733 [#3 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40043 \ dns QUERY,NOERROR,5337,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2488,11 +2488,11 @@ ns1.google.com.,IN,A,331882,216.239.32.10 \ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 -[56] 2016-10-20 15:23:10.322117 [#4 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:10.322117 [#4 dns.pcap 4095] \ [172.17.0.10].37953 [8.8.8.8].53 \ dns QUERY,NOERROR,22982,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:10.323399 [#5 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:10.323399 [#5 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37953 \ dns QUERY,NOERROR,22982,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2505,11 +2505,11 @@ ns1.google.com.,IN,A,331872,216.239.32.10 \ ns3.google.com.,IN,A,157870,216.239.36.10 \ ns4.google.com.,IN,A,157870,216.239.38.10 -[56] 2016-10-20 15:23:52.860937 [#6 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:52.860937 [#6 dns.pcap 4095] \ [172.17.0.10].40953 [8.8.8.8].53 \ dns QUERY,NOERROR,22531,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:52.863771 [#7 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:52.863771 [#7 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40953 \ dns QUERY,NOERROR,22531,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2522,11 +2522,11 @@ ns1.google.com.,IN,A,331830,216.239.32.10 \ ns3.google.com.,IN,A,157828,216.239.36.10 \ ns4.google.com.,IN,A,157828,216.239.38.10 -[56] 2016-10-20 15:23:59.083869 [#8 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:59.083869 [#8 dns.pcap 4095] \ [172.17.0.10].45174 [8.8.8.8].53 \ dns QUERY,NOERROR,58510,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:59.086104 [#9 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:59.086104 [#9 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45174 \ dns QUERY,NOERROR,58510,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2539,11 +2539,11 @@ ns1.google.com.,IN,A,331824,216.239.32.10 \ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 -[56] 2016-10-20 15:24:04.323868 [#10 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:04.323868 [#10 dns.pcap 4095] \ [172.17.0.10].43559 [8.8.8.8].53 \ dns QUERY,NOERROR,49483,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:04.325597 [#11 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:04.325597 [#11 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].43559 \ dns QUERY,NOERROR,49483,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2556,11 +2556,11 @@ ns1.google.com.,IN,A,331818,216.239.32.10 \ ns3.google.com.,IN,A,157816,216.239.36.10 \ ns4.google.com.,IN,A,157816,216.239.38.10 -[56] 2016-10-20 15:24:06.332239 [#12 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:06.332239 [#12 dns.pcap 4095] \ [172.17.0.10].54859 [8.8.8.8].53 \ dns QUERY,NOERROR,31669,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:06.333743 [#13 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:06.333743 [#13 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].54859 \ dns QUERY,NOERROR,31669,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2573,11 +2573,11 @@ ns1.google.com.,IN,A,331816,216.239.32.10 \ ns3.google.com.,IN,A,157814,216.239.36.10 \ ns4.google.com.,IN,A,157814,216.239.38.10 -[56] 2016-10-20 15:24:07.346429 [#14 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:07.346429 [#14 dns.pcap 4095] \ [172.17.0.10].41266 [8.8.8.8].53 \ dns QUERY,NOERROR,63798,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:07.348160 [#15 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:07.348160 [#15 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41266 \ dns QUERY,NOERROR,63798,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2590,11 +2590,11 @@ ns1.google.com.,IN,A,331815,216.239.32.10 \ ns3.google.com.,IN,A,157813,216.239.36.10 \ ns4.google.com.,IN,A,157813,216.239.38.10 -[56] 2016-10-20 15:24:08.360528 [#16 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:08.360528 [#16 dns.pcap 4095] \ [172.17.0.10].60437 [8.8.8.8].53 \ dns QUERY,NOERROR,60258,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:08.362206 [#17 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:08.362206 [#17 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60437 \ dns QUERY,NOERROR,60258,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2607,11 +2607,11 @@ ns1.google.com.,IN,A,331814,216.239.32.10 \ ns3.google.com.,IN,A,157812,216.239.36.10 \ ns4.google.com.,IN,A,157812,216.239.38.10 -[56] 2016-10-20 15:24:09.375942 [#18 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:09.375942 [#18 dns.pcap 4095] \ [172.17.0.10].53820 [8.8.8.8].53 \ dns QUERY,NOERROR,45512,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:09.378425 [#19 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:09.378425 [#19 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53820 \ dns QUERY,NOERROR,45512,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2624,11 +2624,11 @@ ns1.google.com.,IN,A,331813,216.239.32.10 \ ns3.google.com.,IN,A,157811,216.239.36.10 \ ns4.google.com.,IN,A,157811,216.239.38.10 -[56] 2016-10-20 15:24:10.391358 [#20 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:10.391358 [#20 dns.pcap 4095] \ [172.17.0.10].47637 [8.8.8.8].53 \ dns QUERY,NOERROR,1834,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:10.392886 [#21 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:10.392886 [#21 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].47637 \ dns QUERY,NOERROR,1834,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2641,11 +2641,11 @@ ns1.google.com.,IN,A,331812,216.239.32.10 \ ns3.google.com.,IN,A,157810,216.239.36.10 \ ns4.google.com.,IN,A,157810,216.239.38.10 -[56] 2016-10-20 15:24:11.406297 [#22 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:11.406297 [#22 dns.pcap 4095] \ [172.17.0.10].41059 [8.8.8.8].53 \ dns QUERY,NOERROR,48432,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:11.407460 [#23 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:11.407460 [#23 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41059 \ dns QUERY,NOERROR,48432,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2658,11 +2658,11 @@ ns1.google.com.,IN,A,331811,216.239.32.10 \ ns3.google.com.,IN,A,157809,216.239.36.10 \ ns4.google.com.,IN,A,157809,216.239.38.10 -[56] 2016-10-20 15:24:12.419936 [#24 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:12.419936 [#24 dns.pcap 4095] \ [172.17.0.10].32976 [8.8.8.8].53 \ dns QUERY,NOERROR,12038,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:12.421228 [#25 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:12.421228 [#25 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].32976 \ dns QUERY,NOERROR,12038,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2675,11 +2675,11 @@ ns1.google.com.,IN,A,331810,216.239.32.10 \ ns3.google.com.,IN,A,157808,216.239.36.10 \ ns4.google.com.,IN,A,157808,216.239.38.10 -[56] 2016-10-20 15:24:14.428524 [#26 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:14.428524 [#26 dns.pcap 4095] \ [172.17.0.10].53467 [8.8.8.8].53 \ dns QUERY,NOERROR,11614,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:14.429863 [#27 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:14.429863 [#27 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53467 \ dns QUERY,NOERROR,11614,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2692,11 +2692,11 @@ ns1.google.com.,IN,A,331808,216.239.32.10 \ ns3.google.com.,IN,A,157806,216.239.36.10 \ ns4.google.com.,IN,A,157806,216.239.38.10 -[56] 2016-10-20 15:24:16.435733 [#28 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:16.435733 [#28 dns.pcap 4095] \ [172.17.0.10].41532 [8.8.8.8].53 \ dns QUERY,NOERROR,59173,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:16.437471 [#29 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:16.437471 [#29 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41532 \ dns QUERY,NOERROR,59173,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2709,11 +2709,11 @@ ns1.google.com.,IN,A,331806,216.239.32.10 \ ns3.google.com.,IN,A,157804,216.239.36.10 \ ns4.google.com.,IN,A,157804,216.239.38.10 -[56] 2016-10-20 15:24:18.445519 [#30 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:18.445519 [#30 dns.pcap 4095] \ [172.17.0.10].44982 [8.8.8.8].53 \ dns QUERY,NOERROR,45535,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:18.446775 [#31 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:18.446775 [#31 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].44982 \ dns QUERY,NOERROR,45535,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2726,11 +2726,11 @@ ns1.google.com.,IN,A,331804,216.239.32.10 \ ns3.google.com.,IN,A,157802,216.239.36.10 \ ns4.google.com.,IN,A,157802,216.239.38.10 -[56] 2016-10-20 15:24:19.460087 [#32 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:19.460087 [#32 dns.pcap 4095] \ [172.17.0.10].45658 [8.8.8.8].53 \ dns QUERY,NOERROR,64325,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:19.462224 [#33 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:19.462224 [#33 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45658 \ dns QUERY,NOERROR,64325,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2743,11 +2743,11 @@ ns1.google.com.,IN,A,331803,216.239.32.10 \ ns3.google.com.,IN,A,157801,216.239.36.10 \ ns4.google.com.,IN,A,157801,216.239.38.10 -[56] 2016-10-20 15:24:20.475086 [#34 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:20.475086 [#34 dns.pcap 4095] \ [172.17.0.10].59762 [8.8.8.8].53 \ dns QUERY,NOERROR,20736,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:20.476841 [#35 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:20.476841 [#35 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].59762 \ dns QUERY,NOERROR,20736,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2760,11 +2760,11 @@ ns1.google.com.,IN,A,331802,216.239.32.10 \ ns3.google.com.,IN,A,157800,216.239.36.10 \ ns4.google.com.,IN,A,157800,216.239.38.10 -[56] 2016-10-20 15:24:21.489468 [#36 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:21.489468 [#36 dns.pcap 4095] \ [172.17.0.10].37669 [8.8.8.8].53 \ dns QUERY,NOERROR,64358,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:21.490573 [#37 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:21.490573 [#37 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37669 \ dns QUERY,NOERROR,64358,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2777,11 +2777,11 @@ ns1.google.com.,IN,A,331801,216.239.32.10 \ ns3.google.com.,IN,A,157799,216.239.36.10 \ ns4.google.com.,IN,A,157799,216.239.38.10 -[56] 2016-10-20 15:24:22.502667 [#38 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:22.502667 [#38 dns.pcap 4095] \ [172.17.0.10].49829 [8.8.8.8].53 \ dns QUERY,NOERROR,54706,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:22.504738 [#39 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:22.504738 [#39 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].49829 \ dns QUERY,NOERROR,54706,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2794,11 +2794,11 @@ ns1.google.com.,IN,A,331800,216.239.32.10 \ ns3.google.com.,IN,A,157798,216.239.36.10 \ ns4.google.com.,IN,A,157798,216.239.38.10 -[56] 2016-10-20 15:24:23.520203 [#40 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:23.520203 [#40 dns.pcap 4095] \ [172.17.0.10].44980 [8.8.8.8].53 \ dns QUERY,NOERROR,41808,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:23.521976 [#41 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:23.521976 [#41 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].44980 \ dns QUERY,NOERROR,41808,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2811,11 +2811,11 @@ ns1.google.com.,IN,A,331799,216.239.32.10 \ ns3.google.com.,IN,A,157797,216.239.36.10 \ ns4.google.com.,IN,A,157797,216.239.38.10 -[56] 2016-10-20 15:24:24.537264 [#42 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:24.537264 [#42 dns.pcap 4095] \ [172.17.0.10].42042 [8.8.8.8].53 \ dns QUERY,NOERROR,10624,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:24.539398 [#43 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:24.539398 [#43 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].42042 \ dns QUERY,NOERROR,10624,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2828,11 +2828,11 @@ ns1.google.com.,IN,A,331798,216.239.32.10 \ ns3.google.com.,IN,A,157796,216.239.36.10 \ ns4.google.com.,IN,A,157796,216.239.38.10 -[56] 2016-10-20 15:24:25.554744 [#44 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:25.554744 [#44 dns.pcap 4095] \ [172.17.0.10].45703 [8.8.8.8].53 \ dns QUERY,NOERROR,61415,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:25.556513 [#45 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:25.556513 [#45 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45703 \ dns QUERY,NOERROR,61415,qr|rd|ra \ 1 google.com.,IN,A \ @@ -2845,11 +2845,11 @@ ns1.google.com.,IN,A,331797,216.239.32.10 \ ns3.google.com.,IN,A,157795,216.239.36.10 \ ns4.google.com.,IN,A,157795,216.239.38.10 -[56] 2016-10-20 15:24:26.572784 [#46 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:26.572784 [#46 dns.pcap 4095] \ [172.17.0.10].46798 [8.8.8.8].53 \ dns QUERY,NOERROR,17700,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:26.574350 [#47 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:26.574350 [#47 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].46798 \ dns QUERY,NOERROR,17700,qr|rd|ra \ 1 google.com.,IN,A \ diff --git a/src/test/test14.sh b/src/test/test14.sh index 1788f10..c420509 100755 --- a/src/test/test14.sh +++ b/src/test/test14.sh @@ -1,22 +1,24 @@ #!/bin/sh -xe +test -e dns.pcap || ln -s "$srcdir/dns.pcap" dns.pcap + echo "-- only 1" >test14.out -../dnscap -g -q 1 -r dns.pcap-dist 2>>test14.out +../dnscap -g -q 1 -r dns.pcap 2>>test14.out echo "-- not 1" >>test14.out -../dnscap -g -Q 1 -r dns.pcap-dist 2>>test14.out +../dnscap -g -Q 1 -r dns.pcap 2>>test14.out echo "-- only PTR" >>test14.out -../dnscap -g -q PTR -r dns.pcap-dist 2>>test14.out +../dnscap -g -q PTR -r dns.pcap 2>>test14.out echo "-- not PTR" >>test14.out -../dnscap -g -Q PTR -r dns.pcap-dist 2>>test14.out +../dnscap -g -Q PTR -r dns.pcap 2>>test14.out echo "-- only 1" >>test14.out -../dnscap -g -o use_layers=yes -q 1 -r dns.pcap-dist 2>>test14.out +../dnscap -g -o use_layers=yes -q 1 -r dns.pcap 2>>test14.out echo "-- not 1" >>test14.out -../dnscap -g -o use_layers=yes -Q 1 -r dns.pcap-dist 2>>test14.out +../dnscap -g -o use_layers=yes -Q 1 -r dns.pcap 2>>test14.out echo "-- only PTR" >>test14.out -../dnscap -g -o use_layers=yes -q PTR -r dns.pcap-dist 2>>test14.out +../dnscap -g -o use_layers=yes -q PTR -r dns.pcap 2>>test14.out echo "-- not PTR" >>test14.out -../dnscap -g -o use_layers=yes -Q PTR -r dns.pcap-dist 2>>test14.out +../dnscap -g -o use_layers=yes -Q PTR -r dns.pcap 2>>test14.out mv test14.out test14.out.old grep -v "^libgcov profiling error:" test14.out.old > test14.out diff --git a/src/test/test2.sh b/src/test/test2.sh index 83cc8c0..7a5d981 100755 --- a/src/test/test2.sh +++ b/src/test/test2.sh @@ -1,6 +1,8 @@ #!/bin/sh -xe -../dnscap -g -r dns.pcap-dist 2>no-layers.out -../dnscap -g -r dns.pcap-dist -o use_layers=yes 2>layers.out +test -e dns.pcap || ln -s "$srcdir/dns.pcap" dns.pcap + +../dnscap -g -r dns.pcap 2>no-layers.out +../dnscap -g -r dns.pcap -o use_layers=yes 2>layers.out diff no-layers.out layers.out diff --git a/src/test/test3.sh b/src/test/test3.sh index 4b65121..db521ad 100755 --- a/src/test/test3.sh +++ b/src/test/test3.sh @@ -1,6 +1,8 @@ #!/bin/sh -xe -../dnscap -g -f -r frags.pcap-dist -o use_layers=yes -o defrag_ipv4=yes -o max_ipv4_fragments_per_packet=64 2>frags.out +test -e frags.pcap || ln -s "$srcdir/frags.pcap" frags.pcap + +../dnscap -g -f -r frags.pcap -o use_layers=yes -o defrag_ipv4=yes -o max_ipv4_fragments_per_packet=64 2>frags.out # remove timestamp sed -i -e 's%^\(\[[0-9]*\]\)[^\[]*\[%\1 [%g' frags.out @@ -8,6 +10,6 @@ sed -i -e 's%^\(\[[0-9]*\]\)[^\[]*\[%\1 [%g' frags.out # create gold file cp "$srcdir/dns.gold" frags.gold sed -i -e 's%^\(\[[0-9]*\]\)[^\[]*\[%\1 [%g' frags.gold -sed -i -e 's%dns.pcap-dist%frags.pcap-dist%g' frags.gold +sed -i -e 's%dns.pcap%frags.pcap%g' frags.gold diff frags.out frags.gold diff --git a/src/test/test4.sh b/src/test/test4.sh index 7cdf34e..f599735 100755 --- a/src/test/test4.sh +++ b/src/test/test4.sh @@ -1,6 +1,8 @@ #!/bin/sh -xe -../dnscap -g -T -r 1qtcppadd.pcap-dist 2>padding-no-layers.out -../dnscap -g -T -r 1qtcppadd.pcap-dist -o use_layers=yes 2>padding-layers.out +test -e 1qtcppadd.pcap || ln -s "$srcdir/1qtcppadd.pcap" 1qtcppadd.pcap + +../dnscap -g -T -r 1qtcppadd.pcap 2>padding-no-layers.out +../dnscap -g -T -r 1qtcppadd.pcap -o use_layers=yes 2>padding-layers.out diff padding-no-layers.out padding-layers.out diff --git a/src/test/test5.sh b/src/test/test5.sh index a4789d7..e78d55b 100755 --- a/src/test/test5.sh +++ b/src/test/test5.sh @@ -1,20 +1,22 @@ #!/bin/sh -xe +test -e vlan11.pcap || ln -s "$srcdir/vlan11.pcap" vlan11.pcap + osrel=`uname -s` -../dnscap -g -r vlan11.pcap-dist 2>vlan11.out +../dnscap -g -r vlan11.pcap 2>vlan11.out test -f vlan11.out && ! test -s vlan11.out -../dnscap -g -r vlan11.pcap-dist -L 10 2>vlan11.out +../dnscap -g -r vlan11.pcap -L 10 2>vlan11.out test -f vlan11.out && ! test -s vlan11.out -../dnscap -g -r vlan11.pcap-dist -L 4095 2>vlan11.out +../dnscap -g -r vlan11.pcap -L 4095 2>vlan11.out diff vlan11.out "$srcdir/vlan11.gold" -../dnscap -g -r vlan11.pcap-dist -L 11 2>vlan11.out +../dnscap -g -r vlan11.pcap -L 11 2>vlan11.out diff vlan11.out "$srcdir/vlan11.gold" -../dnscap -g -r vlan11.pcap-dist -o use_layers=yes 2>vlan11.out +../dnscap -g -r vlan11.pcap -o use_layers=yes 2>vlan11.out test -f vlan11.out && ! test -s vlan11.out -../dnscap -g -r vlan11.pcap-dist -o use_layers=yes -L 10 2>vlan11.out +../dnscap -g -r vlan11.pcap -o use_layers=yes -L 10 2>vlan11.out test -f vlan11.out && ! test -s vlan11.out -../dnscap -g -r vlan11.pcap-dist -o use_layers=yes -L 4095 2>vlan11.out +../dnscap -g -r vlan11.pcap -o use_layers=yes -L 4095 2>vlan11.out diff vlan11.out "$srcdir/vlan11.gold" -../dnscap -g -r vlan11.pcap-dist -o use_layers=yes -L 11 2>vlan11.out +../dnscap -g -r vlan11.pcap -o use_layers=yes -L 11 2>vlan11.out diff vlan11.out "$srcdir/vlan11.gold" diff --git a/src/test/test6.sh b/src/test/test6.sh index f05713b..18a6887 100755 --- a/src/test/test6.sh +++ b/src/test/test6.sh @@ -1,6 +1,8 @@ #!/bin/sh -xe -../dnscap -g -r dnspad.pcap-dist 2>dnspad.out -../dnscap -o use_layers=yes -g -r dnspad.pcap-dist 2>>dnspad.out +test -e dnspad.pcap || ln -s "$srcdir/dnspad.pcap" dnspad.pcap + +../dnscap -g -r dnspad.pcap 2>dnspad.out +../dnscap -o use_layers=yes -g -r dnspad.pcap 2>>dnspad.out diff dnspad.out "$srcdir/dnspad.gold" diff --git a/src/test/test7.gold b/src/test/test7.gold index c3bb683..0c4c34c 100644 --- a/src/test/test7.gold +++ b/src/test/test7.gold @@ -1,25 +1,25 @@ -[60] 2018-01-10 11:22:41.543825 [#0 dnso1tcp.pcap-dist 4095] \ +[60] 2018-01-10 11:22:41.543825 [#0 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[60] 2018-01-10 11:22:41.548834 [#1 dnso1tcp.pcap-dist 4095] \ +[60] 2018-01-10 11:22:41.548834 [#1 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 -[54] 2018-01-10 11:22:41.548947 [#2 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.548947 [#2 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.552406 [#3 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.552406 [#3 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.555912 [#4 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.555912 [#4 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,59311,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.556032 [#5 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.556032 [#5 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:41.600183 [#6 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.600183 [#6 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,35665,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:41.616460 [#7 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:41.616460 [#7 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,35665,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -27,35 +27,35 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:41.616663 [#8 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.616663 [#8 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.659921 [#9 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.659921 [#9 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,5337,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.663576 [#10 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.663576 [#10 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,5337,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.663734 [#11 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.663734 [#11 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.706183 [#12 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.706183 [#12 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,22982,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.709680 [#13 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.709680 [#13 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,22982,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.709779 [#14 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.709779 [#14 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:41.754101 [#15 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.754101 [#15 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,18718,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:41.757876 [#16 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:41.757876 [#16 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,18718,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -63,35 +63,35 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:41.758191 [#17 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.758191 [#17 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.804255 [#18 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.804255 [#18 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,22531,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.809483 [#19 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.809483 [#19 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,22531,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.809780 [#20 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.809780 [#20 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.854113 [#21 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.854113 [#21 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,58510,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.857788 [#22 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.857788 [#22 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,58510,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.858002 [#23 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.858002 [#23 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:41.902165 [#24 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.902165 [#24 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,45248,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:41.905802 [#25 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:41.905802 [#25 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,45248,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -99,35 +99,35 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:41.905918 [#26 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.905918 [#26 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.950164 [#27 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.950164 [#27 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,49483,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.954138 [#28 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.954138 [#28 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,49483,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.954452 [#29 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.954452 [#29 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.999121 [#30 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.999121 [#30 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,31669,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.002657 [#31 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.002657 [#31 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,31669,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.002831 [#32 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.002831 [#32 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.047148 [#33 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.047148 [#33 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,25433,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.052425 [#34 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.052425 [#34 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,25433,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -135,24 +135,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.052901 [#35 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.052901 [#35 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.097899 [#36 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.097899 [#36 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,63798,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.101443 [#37 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.101443 [#37 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,63798,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.101553 [#38 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.101553 [#38 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.145005 [#39 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.145005 [#39 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,8470,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.148639 [#40 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.148639 [#40 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,8470,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -160,24 +160,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.148770 [#41 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.148770 [#41 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.192777 [#42 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.192777 [#42 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,60258,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.196256 [#43 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.196256 [#43 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,60258,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.196471 [#44 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.196471 [#44 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.240395 [#45 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.240395 [#45 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,44985,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.245103 [#46 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.245103 [#46 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,44985,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -185,24 +185,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.245585 [#47 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.245585 [#47 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.290257 [#48 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.290257 [#48 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,45512,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.293978 [#49 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.293978 [#49 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,45512,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.294300 [#50 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.294300 [#50 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.337985 [#51 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.337985 [#51 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,22980,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.341559 [#52 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.341559 [#52 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,22980,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -210,24 +210,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.341648 [#53 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.341648 [#53 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.385009 [#54 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.385009 [#54 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,1834,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.389082 [#55 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.389082 [#55 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,1834,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.389343 [#56 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.389343 [#56 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.433458 [#57 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.433458 [#57 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,25431,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.438748 [#58 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.438748 [#58 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,25431,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -235,24 +235,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.439060 [#59 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.439060 [#59 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.484005 [#60 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.484005 [#60 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,48432,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.487697 [#61 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.487697 [#61 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,48432,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.488035 [#62 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.488035 [#62 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.532414 [#63 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.532414 [#63 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,47411,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.537574 [#64 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.537574 [#64 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,47411,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -260,57 +260,57 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.537941 [#65 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.537941 [#65 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.583021 [#66 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.583021 [#66 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,12038,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.586898 [#67 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.586898 [#67 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,12038,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.587050 [#68 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.587050 [#68 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.630221 [#69 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.630221 [#69 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,11614,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.633808 [#70 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.633808 [#70 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,11614,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.634006 [#71 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.634006 [#71 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.679168 [#72 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.679168 [#72 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,59173,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.682888 [#73 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.682888 [#73 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,59173,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.683273 [#74 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.683273 [#74 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.727254 [#75 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.727254 [#75 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,45535,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.732703 [#76 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.732703 [#76 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,45535,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.733029 [#77 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.733029 [#77 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.777184 [#78 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.777184 [#78 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,60808,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.781053 [#79 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.781053 [#79 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,60808,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -318,24 +318,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.781416 [#80 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.781416 [#80 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.824222 [#81 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.824222 [#81 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,64325,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.828050 [#82 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.828050 [#82 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,64325,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.828346 [#83 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.828346 [#83 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.872186 [#84 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.872186 [#84 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,25543,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.875911 [#85 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.875911 [#85 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,25543,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -343,24 +343,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.876226 [#86 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.876226 [#86 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.920231 [#87 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.920231 [#87 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,20736,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.923917 [#88 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.923917 [#88 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,20736,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.924082 [#89 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.924082 [#89 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.968961 [#90 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.968961 [#90 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,25911,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.972662 [#91 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.972662 [#91 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,25911,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -368,24 +368,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.972972 [#92 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.972972 [#92 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.017364 [#93 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.017364 [#93 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,64358,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.022591 [#94 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.022591 [#94 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,64358,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[54] 2018-01-10 11:22:43.022938 [#95 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.022938 [#95 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.066765 [#96 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.066765 [#96 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,37698,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.070349 [#97 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.070349 [#97 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,37698,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -393,24 +393,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:43.070484 [#98 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.070484 [#98 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.114332 [#99 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.114332 [#99 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,54706,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.119538 [#100 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.119538 [#100 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,54706,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[54] 2018-01-10 11:22:43.119857 [#101 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.119857 [#101 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.163857 [#102 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.163857 [#102 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,32142,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.167576 [#103 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.167576 [#103 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,32142,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -418,24 +418,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:43.167733 [#104 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.167733 [#104 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.211417 [#105 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.211417 [#105 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,41808,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.216686 [#106 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.216686 [#106 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,41808,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[54] 2018-01-10 11:22:43.217042 [#107 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.217042 [#107 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.260995 [#108 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.260995 [#108 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,18886,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.265047 [#109 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.265047 [#109 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,18886,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -443,24 +443,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:43.265399 [#110 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.265399 [#110 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.310017 [#111 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.310017 [#111 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,10624,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.313596 [#112 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.313596 [#112 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,10624,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[54] 2018-01-10 11:22:43.313685 [#113 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.313685 [#113 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.356802 [#114 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.356802 [#114 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,33139,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.360685 [#115 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.360685 [#115 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,33139,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -468,24 +468,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:43.360864 [#116 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.360864 [#116 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.406308 [#117 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.406308 [#117 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,61415,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.410191 [#118 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.410191 [#118 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,61415,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[54] 2018-01-10 11:22:43.410440 [#119 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.410440 [#119 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.454193 [#120 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.454193 [#120 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,59258,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.458191 [#121 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.458191 [#121 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,59258,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -493,20 +493,20 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:43.458511 [#122 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.458511 [#122 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.503242 [#123 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.503242 [#123 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,17700,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.506884 [#124 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.506884 [#124 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,17700,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[52] 2018-01-10 11:22:43.507821 [#125 dnso1tcp.pcap-dist 4095] \ +[52] 2018-01-10 11:22:43.507821 [#125 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[52] 2018-01-10 11:22:43.511351 [#126 dnso1tcp.pcap-dist 4095] \ +[52] 2018-01-10 11:22:43.511351 [#126 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 1515583361.543825 172.17.0.8 51388 8.8.8.8 53 6 1515583361.548834 8.8.8.8 53 172.17.0.8 51388 6 @@ -635,40 +635,40 @@ 1515583363.506884 8.8.8.8 53 172.17.0.8 51388 6 17700 0 0 |QR|RD|RA| IN A google.com. 1515583363.507821 172.17.0.8 51388 8.8.8.8 53 6 1515583363.511351 8.8.8.8 53 172.17.0.8 51388 6 -[52] 2017-12-11 13:59:04.957247 [#0 1qtcpnosyn.pcap-dist 4095] \ +[52] 2017-12-11 13:59:04.957247 [#0 1qtcpnosyn.pcap 4095] \ [172.17.0.9].48613 [8.8.8.8].53 -[52] 2017-12-11 13:59:04.960230 [#1 1qtcpnosyn.pcap-dist 4095] \ +[52] 2017-12-11 13:59:04.960230 [#1 1qtcpnosyn.pcap 4095] \ [8.8.8.8].53 [172.17.0.9].48613 1513000744.957247 172.17.0.9 48613 8.8.8.8 53 6 1513000744.960230 8.8.8.8 53 172.17.0.9 48613 6 -[60] 2018-01-10 11:22:41.543825 [#0 dnso1tcp-midmiss.pcap-dist 4095] \ +[60] 2018-01-10 11:22:41.543825 [#0 dnso1tcp-midmiss.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[60] 2018-01-10 11:22:41.548834 [#1 dnso1tcp-midmiss.pcap-dist 4095] \ +[60] 2018-01-10 11:22:41.548834 [#1 dnso1tcp-midmiss.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 -[54] 2018-01-10 11:22:41.548947 [#2 dnso1tcp-midmiss.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.548947 [#2 dnso1tcp-midmiss.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.552406 [#3 dnso1tcp-midmiss.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.552406 [#3 dnso1tcp-midmiss.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.555912 [#4 dnso1tcp-midmiss.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.555912 [#4 dnso1tcp-midmiss.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,59311,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.556032 [#5 dnso1tcp-midmiss.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.556032 [#5 dnso1tcp-midmiss.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:41.600183 [#6 dnso1tcp-midmiss.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.600183 [#6 dnso1tcp-midmiss.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,35665,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[98] 2018-01-10 11:22:41.663576 [#7 dnso1tcp-midmiss.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.663576 [#7 dnso1tcp-midmiss.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 -[54] 2018-01-10 11:22:41.663734 [#8 dnso1tcp-midmiss.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.663734 [#8 dnso1tcp-midmiss.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.706183 [#9 dnso1tcp-midmiss.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.706183 [#9 dnso1tcp-midmiss.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[98] 2018-01-10 11:22:41.709680 [#10 dnso1tcp-midmiss.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.709680 [#10 dnso1tcp-midmiss.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 1515583361.543825 172.17.0.8 51388 8.8.8.8 53 6 1515583361.548834 8.8.8.8 53 172.17.0.8 51388 6 @@ -684,28 +684,28 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate -[60] 2018-01-10 11:22:41.543825 [#0 dnso1tcp.pcap-dist 4095] \ +[60] 2018-01-10 11:22:41.543825 [#0 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[60] 2018-01-10 11:22:41.548834 [#1 dnso1tcp.pcap-dist 4095] \ +[60] 2018-01-10 11:22:41.548834 [#1 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 -[54] 2018-01-10 11:22:41.548947 [#2 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.548947 [#2 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.552406 [#3 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.552406 [#3 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.555912 [#4 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.555912 [#4 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,59311,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.556032 [#5 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.556032 [#5 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:41.600183 [#6 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.600183 [#6 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,35665,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:41.616460 [#7 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:41.616460 [#7 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,35665,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -713,35 +713,35 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:41.616663 [#8 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.616663 [#8 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.659921 [#9 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.659921 [#9 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,5337,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.663576 [#10 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.663576 [#10 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,5337,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.663734 [#11 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.663734 [#11 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.706183 [#12 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.706183 [#12 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,22982,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.709680 [#13 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.709680 [#13 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,22982,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.709779 [#14 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.709779 [#14 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:41.754101 [#15 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.754101 [#15 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,18718,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:41.757876 [#16 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:41.757876 [#16 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,18718,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -749,35 +749,35 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:41.758191 [#17 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.758191 [#17 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.804255 [#18 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.804255 [#18 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,22531,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.809483 [#19 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.809483 [#19 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,22531,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.809780 [#20 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.809780 [#20 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.854113 [#21 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.854113 [#21 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,58510,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.857788 [#22 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.857788 [#22 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,58510,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.858002 [#23 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.858002 [#23 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:41.902165 [#24 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.902165 [#24 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,45248,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:41.905802 [#25 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:41.905802 [#25 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,45248,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -785,35 +785,35 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:41.905918 [#26 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.905918 [#26 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.950164 [#27 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.950164 [#27 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,49483,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.954138 [#28 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.954138 [#28 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,49483,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.954452 [#29 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.954452 [#29 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.999121 [#30 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.999121 [#30 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,31669,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.002657 [#31 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.002657 [#31 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,31669,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.002831 [#32 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.002831 [#32 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.047148 [#33 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.047148 [#33 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,25433,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.052425 [#34 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.052425 [#34 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,25433,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -821,24 +821,24 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.052901 [#35 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.052901 [#35 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.097899 [#36 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.097899 [#36 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,63798,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.101443 [#37 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.101443 [#37 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,63798,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.101553 [#38 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.101553 [#38 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.145005 [#39 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.145005 [#39 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,8470,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.148639 [#40 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.148639 [#40 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,8470,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -846,24 +846,24 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.148770 [#41 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.148770 [#41 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.192777 [#42 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.192777 [#42 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,60258,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.196256 [#43 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.196256 [#43 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,60258,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.196471 [#44 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.196471 [#44 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.240395 [#45 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.240395 [#45 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,44985,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.245103 [#46 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.245103 [#46 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,44985,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -871,24 +871,24 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.245585 [#47 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.245585 [#47 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.290257 [#48 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.290257 [#48 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,45512,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.293978 [#49 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.293978 [#49 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,45512,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.294300 [#50 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.294300 [#50 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.337985 [#51 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.337985 [#51 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,22980,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.341559 [#52 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.341559 [#52 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,22980,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -896,24 +896,24 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.341648 [#53 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.341648 [#53 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.385009 [#54 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.385009 [#54 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,1834,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.389082 [#55 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.389082 [#55 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,1834,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.389343 [#56 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.389343 [#56 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.433458 [#57 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.433458 [#57 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,25431,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.438748 [#58 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.438748 [#58 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,25431,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -921,24 +921,24 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.439060 [#59 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.439060 [#59 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.484005 [#60 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.484005 [#60 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,48432,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.487697 [#61 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.487697 [#61 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,48432,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.488035 [#62 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.488035 [#62 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.532414 [#63 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.532414 [#63 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,47411,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.537574 [#64 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.537574 [#64 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,47411,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -946,57 +946,57 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.537941 [#65 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.537941 [#65 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.583021 [#66 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.583021 [#66 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,12038,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.586898 [#67 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.586898 [#67 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,12038,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.587050 [#68 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.587050 [#68 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.630221 [#69 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.630221 [#69 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,11614,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.633808 [#70 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.633808 [#70 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,11614,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.634006 [#71 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.634006 [#71 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.679168 [#72 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.679168 [#72 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,59173,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.682888 [#73 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.682888 [#73 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,59173,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.683273 [#74 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.683273 [#74 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.727254 [#75 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.727254 [#75 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,45535,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.732703 [#76 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.732703 [#76 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,45535,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.733029 [#77 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.733029 [#77 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.777184 [#78 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.777184 [#78 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,60808,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.781053 [#79 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.781053 [#79 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,60808,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1004,24 +1004,24 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.781416 [#80 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.781416 [#80 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.824222 [#81 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.824222 [#81 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,64325,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.828050 [#82 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.828050 [#82 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,64325,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.828346 [#83 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.828346 [#83 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.872186 [#84 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.872186 [#84 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,25543,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.875911 [#85 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.875911 [#85 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,25543,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1029,24 +1029,24 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.876226 [#86 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.876226 [#86 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.920231 [#87 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.920231 [#87 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,20736,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.923917 [#88 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.923917 [#88 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,20736,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[54] 2018-01-10 11:22:42.924082 [#89 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.924082 [#89 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.968961 [#90 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.968961 [#90 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,25911,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.972662 [#91 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.972662 [#91 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,25911,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1054,24 +1054,24 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:42.972972 [#92 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:42.972972 [#92 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.017364 [#93 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.017364 [#93 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,64358,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.022591 [#94 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.022591 [#94 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,64358,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[54] 2018-01-10 11:22:43.022938 [#95 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.022938 [#95 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.066765 [#96 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.066765 [#96 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,37698,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.070349 [#97 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.070349 [#97 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,37698,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1079,24 +1079,24 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:43.070484 [#98 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.070484 [#98 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.114332 [#99 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.114332 [#99 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,54706,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.119538 [#100 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.119538 [#100 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,54706,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[54] 2018-01-10 11:22:43.119857 [#101 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.119857 [#101 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.163857 [#102 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.163857 [#102 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,32142,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.167576 [#103 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.167576 [#103 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,32142,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1104,24 +1104,24 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:43.167733 [#104 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.167733 [#104 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.211417 [#105 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.211417 [#105 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,41808,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.216686 [#106 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.216686 [#106 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,41808,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[54] 2018-01-10 11:22:43.217042 [#107 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.217042 [#107 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.260995 [#108 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.260995 [#108 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,18886,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.265047 [#109 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.265047 [#109 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,18886,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1129,24 +1129,24 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:43.265399 [#110 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.265399 [#110 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.310017 [#111 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.310017 [#111 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,10624,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.313596 [#112 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.313596 [#112 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,10624,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[54] 2018-01-10 11:22:43.313685 [#113 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.313685 [#113 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.356802 [#114 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.356802 [#114 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,33139,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.360685 [#115 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.360685 [#115 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,33139,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1154,24 +1154,24 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:43.360864 [#116 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.360864 [#116 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.406308 [#117 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.406308 [#117 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,61415,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.410191 [#118 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.410191 [#118 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,61415,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[54] 2018-01-10 11:22:43.410440 [#119 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.410440 [#119 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.454193 [#120 dnso1tcp.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.454193 [#120 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,59258,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.458191 [#121 dnso1tcp.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.458191 [#121 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,59258,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1179,20 +1179,20 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[54] 2018-01-10 11:22:43.458511 [#122 dnso1tcp.pcap-dist 4095] \ +[54] 2018-01-10 11:22:43.458511 [#122 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.503242 [#123 dnso1tcp.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.503242 [#123 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,17700,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.506884 [#124 dnso1tcp.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.506884 [#124 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,17700,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[52] 2018-01-10 11:22:43.507821 [#125 dnso1tcp.pcap-dist 4095] \ +[52] 2018-01-10 11:22:43.507821 [#125 dnso1tcp.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[52] 2018-01-10 11:22:43.511351 [#126 dnso1tcp.pcap-dist 4095] \ +[52] 2018-01-10 11:22:43.511351 [#126 dnso1tcp.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 1515583361.543825 172.17.0.8 51388 8.8.8.8 53 6 1515583361.548834 8.8.8.8 53 172.17.0.8 51388 6 @@ -1321,40 +1321,40 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 1515583363.506884 8.8.8.8 53 172.17.0.8 51388 6 17700 0 0 |QR|RD|RA| IN A google.com. 1515583363.507821 172.17.0.8 51388 8.8.8.8 53 6 1515583363.511351 8.8.8.8 53 172.17.0.8 51388 6 -[93] 2017-12-11 13:59:04.953122 [#0 1qtcpnosyn.pcap-dist 4095] \ +[93] 2017-12-11 13:59:04.953122 [#0 1qtcpnosyn.pcap 4095] \ [172.17.0.9].48613 [8.8.8.8].53 \ dns QUERY,NOERROR,4815,rd|ad \ 1 google.com.,IN,A 0 0 \ 1 .,4096,4096,0,edns0[len=0,UDP=4096,ver=0,rcode=0,DO=0,z=0] -[109] 2017-12-11 13:59:04.956698 [#1 1qtcpnosyn.pcap-dist 4095] \ +[109] 2017-12-11 13:59:04.956698 [#1 1qtcpnosyn.pcap 4095] \ [8.8.8.8].53 [172.17.0.9].48613 \ dns QUERY,NOERROR,4815,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,47,172.217.22.174 0 \ 1 .,512,512,0,edns0[len=0,UDP=512,ver=0,rcode=0,DO=0,z=0] -[52] 2017-12-11 13:59:04.957247 [#2 1qtcpnosyn.pcap-dist 4095] \ +[52] 2017-12-11 13:59:04.957247 [#2 1qtcpnosyn.pcap 4095] \ [172.17.0.9].48613 [8.8.8.8].53 -[52] 2017-12-11 13:59:04.960230 [#3 1qtcpnosyn.pcap-dist 4095] \ +[52] 2017-12-11 13:59:04.960230 [#3 1qtcpnosyn.pcap 4095] \ [8.8.8.8].53 [172.17.0.9].48613 1513000744.953122 172.17.0.9 48613 8.8.8.8 53 6 4815 0 0 |RD|AD| IN A google.com. 1513000744.956698 8.8.8.8 53 172.17.0.9 48613 6 4815 0 0 |QR|RD|RA| IN A google.com. 1513000744.957247 172.17.0.9 48613 8.8.8.8 53 6 1513000744.960230 8.8.8.8 53 172.17.0.9 48613 6 -[80] 2018-01-10 11:22:41.552406 [#0 do1t-nosyn-1nolen.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.552406 [#0 do1t-nosyn-1nolen.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns Label length overflow -[98] 2018-01-10 11:22:41.555912 [#1 do1t-nosyn-1nolen.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.555912 [#1 do1t-nosyn-1nolen.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,59311,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.556032 [#2 do1t-nosyn-1nolen.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.556032 [#2 do1t-nosyn-1nolen.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:41.600183 [#3 do1t-nosyn-1nolen.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.600183 [#3 do1t-nosyn-1nolen.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,35665,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:41.616460 [#4 do1t-nosyn-1nolen.pcap-dist 4095] \ +[197] 2018-01-10 11:22:41.616460 [#4 do1t-nosyn-1nolen.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,35665,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -1367,39 +1367,39 @@ Enabling parse_ongoing_tcp and allow_reset_tcpstate 1515583361.556032 172.17.0.8 51388 8.8.8.8 53 6 1515583361.600183 172.17.0.8 51388 8.8.8.8 53 6 35665 0 0 |RD| IN PTR 206.218.58.216.in-addr.arpa. 1515583361.616460 8.8.8.8 53 172.17.0.8 51388 6 35665 0 0 |QR|RD|RA| IN PTR 206.218.58.216.in-addr.arpa. -[60] 2018-01-10 11:22:41.543825 [#0 dnso1tcp-midmiss.pcap-dist 4095] \ +[60] 2018-01-10 11:22:41.543825 [#0 dnso1tcp-midmiss.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[60] 2018-01-10 11:22:41.548834 [#1 dnso1tcp-midmiss.pcap-dist 4095] \ +[60] 2018-01-10 11:22:41.548834 [#1 dnso1tcp-midmiss.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 -[54] 2018-01-10 11:22:41.548947 [#2 dnso1tcp-midmiss.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.548947 [#2 dnso1tcp-midmiss.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.552406 [#3 dnso1tcp-midmiss.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.552406 [#3 dnso1tcp-midmiss.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.555912 [#4 dnso1tcp-midmiss.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.555912 [#4 dnso1tcp-midmiss.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,59311,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.556032 [#5 dnso1tcp-midmiss.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.556032 [#5 dnso1tcp-midmiss.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:41.600183 [#6 dnso1tcp-midmiss.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.600183 [#6 dnso1tcp-midmiss.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,35665,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[98] 2018-01-10 11:22:41.663576 [#7 dnso1tcp-midmiss.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.663576 [#7 dnso1tcp-midmiss.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,5337,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[54] 2018-01-10 11:22:41.663734 [#8 dnso1tcp-midmiss.pcap-dist 4095] \ +[54] 2018-01-10 11:22:41.663734 [#8 dnso1tcp-midmiss.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.706183 [#9 dnso1tcp-midmiss.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.706183 [#9 dnso1tcp-midmiss.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,22982,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.709680 [#10 dnso1tcp-midmiss.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.709680 [#10 dnso1tcp-midmiss.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,22982,qr|rd|ra \ 1 google.com.,IN,A \ diff --git a/src/test/test7.sh b/src/test/test7.sh index 6c9a4ec..cdad698 100755 --- a/src/test/test7.sh +++ b/src/test/test7.sh @@ -4,7 +4,9 @@ txtout="../../plugins/txtout/.libs/txtout.so" rm -f test7.out test7.layer.out -for what in dnso1tcp.pcap-dist 1qtcpnosyn.pcap-dist do1t-nosyn-1nolen.pcap-dist dnso1tcp-midmiss.pcap-dist; do +for what in dnso1tcp.pcap 1qtcpnosyn.pcap do1t-nosyn-1nolen.pcap dnso1tcp-midmiss.pcap; do + test -e "$what" || ln -s "$srcdir/$what" "$what" + ../dnscap -r "$what" -g -T 2>>test7.out ../dnscap -r "$what" -g -T -o use_layers=yes 2>>test7.layer.out if [ -f "$txtout" ]; then @@ -20,7 +22,9 @@ echo "" >>test7.layer.out echo "Enabling parse_ongoing_tcp and allow_reset_tcpstate" >>test7.layer.out echo "" >>test7.layer.out -for what in dnso1tcp.pcap-dist 1qtcpnosyn.pcap-dist do1t-nosyn-1nolen.pcap-dist dnso1tcp-midmiss.pcap-dist; do +for what in dnso1tcp.pcap 1qtcpnosyn.pcap do1t-nosyn-1nolen.pcap dnso1tcp-midmiss.pcap; do + test -e "$what" || ln -s "$srcdir/$what" "$what" + ../dnscap -r "$what" -g -T -o parse_ongoing_tcp=yes -o allow_reset_tcpstate=yes 2>>test7.out ../dnscap -r "$what" -g -T -o parse_ongoing_tcp=yes -o allow_reset_tcpstate=yes -o use_layers=yes 2>>test7.layer.out if [ -f "$txtout" ]; then diff --git a/src/test/test8.gold b/src/test/test8.gold index a4196e4..bd116f6 100644 --- a/src/test/test8.gold +++ b/src/test/test8.gold @@ -1,69 +1,69 @@ -[60] 2017-12-11 13:59:04.949707 [#0 dnsotcp-many1pkt.pcap-dist 4095] \ +[60] 2017-12-11 13:59:04.949707 [#0 dnsotcp-many1pkt.pcap 4095] \ [172.17.0.9].48613 [8.8.8.8].53 -[60] 2017-12-11 13:59:04.953026 [#1 dnsotcp-many1pkt.pcap-dist 4095] \ +[60] 2017-12-11 13:59:04.953026 [#1 dnsotcp-many1pkt.pcap 4095] \ [8.8.8.8].53 [172.17.0.9].48613 -[142] 2017-12-11 13:59:04.953122 [#2 dnsotcp-many1pkt.pcap-dist 4095] \ +[142] 2017-12-11 13:59:04.953122 [#2 dnsotcp-many1pkt.pcap 4095] \ [172.17.0.9].48613 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[142] 2017-12-11 13:59:04.953122 [#2 dnsotcp-many1pkt.pcap-dist 4095] \ +[142] 2017-12-11 13:59:04.953122 [#2 dnsotcp-many1pkt.pcap 4095] \ [172.17.0.9].48613 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[142] 2017-12-11 13:59:04.953122 [#2 dnsotcp-many1pkt.pcap-dist 4095] \ +[142] 2017-12-11 13:59:04.953122 [#2 dnsotcp-many1pkt.pcap 4095] \ [172.17.0.9].48613 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[109] 2017-12-11 13:59:04.956698 [#5 dnsotcp-many1pkt.pcap-dist 4095] \ +[109] 2017-12-11 13:59:04.956698 [#5 dnsotcp-many1pkt.pcap 4095] \ [8.8.8.8].53 [172.17.0.9].48613 \ dns QUERY,NOERROR,4815,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,47,172.217.22.174 0 \ 1 .,512,512,0,edns0[len=0,UDP=512,ver=0,rcode=0,DO=0,z=0] -[52] 2017-12-11 13:59:04.957247 [#6 dnsotcp-many1pkt.pcap-dist 4095] \ +[52] 2017-12-11 13:59:04.957247 [#6 dnsotcp-many1pkt.pcap 4095] \ [172.17.0.9].48613 [8.8.8.8].53 -[52] 2017-12-11 13:59:04.960230 [#7 dnsotcp-many1pkt.pcap-dist 4095] \ +[52] 2017-12-11 13:59:04.960230 [#7 dnsotcp-many1pkt.pcap 4095] \ [8.8.8.8].53 [172.17.0.9].48613 -[60] 2018-01-10 11:22:41.543825 [#0 dnsotcp-manyopkts.pcap-dist 4095] \ +[60] 2018-01-10 11:22:41.543825 [#0 dnsotcp-manyopkts.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[60] 2018-01-10 11:22:41.548834 [#1 dnsotcp-manyopkts.pcap-dist 4095] \ +[60] 2018-01-10 11:22:41.548834 [#1 dnsotcp-manyopkts.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 -[97] 2018-01-10 11:22:41.548947 [#2 dnsotcp-manyopkts.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.548947 [#2 dnsotcp-manyopkts.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[97] 2018-01-10 11:22:41.552406 [#3 dnsotcp-manyopkts.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.552406 [#3 dnsotcp-manyopkts.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:41.552406 [#3 dnsotcp-manyopkts.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.552406 [#3 dnsotcp-manyopkts.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[97] 2018-01-10 11:22:41.552406 [#3 dnsotcp-manyopkts.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.552406 [#3 dnsotcp-manyopkts.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[60] 2018-01-10 11:22:41.543825 [#0 dnso1tcp-bighole.pcap-dist 4095] \ +[60] 2018-01-10 11:22:41.543825 [#0 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[60] 2018-01-10 11:22:41.548834 [#1 dnso1tcp-bighole.pcap-dist 4095] \ +[60] 2018-01-10 11:22:41.548834 [#1 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 -[80] 2018-01-10 11:22:41.552406 [#2 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.552406 [#2 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.552406 [#2 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.552406 [#2 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:41.555912 [#4 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:41.555912 [#4 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,59311,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,58,216.58.211.142 0 0 -[97] 2018-01-10 11:22:41.600183 [#5 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.600183 [#5 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:41.600183 [#5 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:41.600183 [#5 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,35665,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:41.616460 [#7 dnso1tcp-bighole.pcap-dist 4095] \ +[197] 2018-01-10 11:22:41.616460 [#7 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,35665,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -71,43 +71,43 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21599,dfw06s47-in-f14.1e100.net. 0 0 -[80] 2018-01-10 11:22:41.659921 [#8 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.659921 [#8 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:41.659921 [#8 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:41.659921 [#8 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,5337,rd \ 1 google.com.,IN,A 0 0 0 -[97] 2018-01-10 11:22:42.047148 [#10 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.047148 [#10 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.047148 [#10 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.047148 [#10 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,25433,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[80] 2018-01-10 11:22:42.097899 [#12 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.097899 [#12 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.097899 [#12 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.097899 [#12 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,63798,rd \ 1 google.com.,IN,A 0 0 0 -[97] 2018-01-10 11:22:42.145005 [#14 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.145005 [#14 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.145005 [#14 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.145005 [#14 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,8470,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[80] 2018-01-10 11:22:42.192777 [#16 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.192777 [#16 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.192777 [#16 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.192777 [#16 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,60258,rd \ 1 google.com.,IN,A 0 0 0 -[97] 2018-01-10 11:22:42.240395 [#18 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.240395 [#18 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.240395 [#18 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.240395 [#18 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,44985,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.245103 [#20 dnso1tcp-bighole.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.245103 [#20 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,44985,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -115,24 +115,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[80] 2018-01-10 11:22:42.290257 [#21 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.290257 [#21 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.290257 [#21 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.290257 [#21 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,45512,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.293978 [#23 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.293978 [#23 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,45512,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[97] 2018-01-10 11:22:42.337985 [#24 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.337985 [#24 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.337985 [#24 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.337985 [#24 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,22980,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.341559 [#26 dnso1tcp-bighole.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.341559 [#26 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,22980,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -140,24 +140,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[80] 2018-01-10 11:22:42.385009 [#27 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.385009 [#27 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.385009 [#27 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.385009 [#27 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,1834,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.389082 [#29 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.389082 [#29 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,1834,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[97] 2018-01-10 11:22:42.433458 [#30 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.433458 [#30 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.433458 [#30 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.433458 [#30 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,25431,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.438748 [#32 dnso1tcp-bighole.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.438748 [#32 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,25431,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -165,24 +165,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[80] 2018-01-10 11:22:42.484005 [#33 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.484005 [#33 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.484005 [#33 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.484005 [#33 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,48432,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.487697 [#35 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.487697 [#35 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,48432,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[97] 2018-01-10 11:22:42.532414 [#36 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.532414 [#36 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.532414 [#36 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.532414 [#36 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,47411,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.537574 [#38 dnso1tcp-bighole.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.537574 [#38 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,47411,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -190,57 +190,57 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[80] 2018-01-10 11:22:42.583021 [#39 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.583021 [#39 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.583021 [#39 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.583021 [#39 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,12038,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.586898 [#41 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.586898 [#41 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,12038,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[80] 2018-01-10 11:22:42.630221 [#42 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.630221 [#42 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.630221 [#42 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.630221 [#42 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,11614,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.633808 [#44 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.633808 [#44 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,11614,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[80] 2018-01-10 11:22:42.679168 [#45 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.679168 [#45 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.679168 [#45 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.679168 [#45 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,59173,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.682888 [#47 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.682888 [#47 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,59173,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[80] 2018-01-10 11:22:42.727254 [#48 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.727254 [#48 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.727254 [#48 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.727254 [#48 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,45535,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.732703 [#50 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.732703 [#50 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,45535,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[97] 2018-01-10 11:22:42.777184 [#51 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.777184 [#51 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.777184 [#51 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.777184 [#51 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,60808,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.781053 [#53 dnso1tcp-bighole.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.781053 [#53 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,60808,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -248,24 +248,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[80] 2018-01-10 11:22:42.824222 [#54 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.824222 [#54 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.824222 [#54 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.824222 [#54 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,64325,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.828050 [#56 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.828050 [#56 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,64325,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[97] 2018-01-10 11:22:42.872186 [#57 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.872186 [#57 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.872186 [#57 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.872186 [#57 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,25543,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.875911 [#59 dnso1tcp-bighole.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.875911 [#59 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,25543,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -273,24 +273,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21598,dfw06s47-in-f14.1e100.net. 0 0 -[80] 2018-01-10 11:22:42.920231 [#60 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.920231 [#60 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:42.920231 [#60 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:42.920231 [#60 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,20736,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:42.923917 [#62 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:42.923917 [#62 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,20736,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,57,216.58.211.142 0 0 -[97] 2018-01-10 11:22:42.968961 [#63 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.968961 [#63 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:42.968961 [#63 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:42.968961 [#63 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,25911,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:42.972662 [#65 dnso1tcp-bighole.pcap-dist 4095] \ +[197] 2018-01-10 11:22:42.972662 [#65 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,25911,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -298,24 +298,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[80] 2018-01-10 11:22:43.017364 [#66 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.017364 [#66 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.017364 [#66 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.017364 [#66 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,64358,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.022591 [#68 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.022591 [#68 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,64358,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[97] 2018-01-10 11:22:43.066765 [#69 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.066765 [#69 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.066765 [#69 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.066765 [#69 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,37698,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.070349 [#71 dnso1tcp-bighole.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.070349 [#71 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,37698,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -323,24 +323,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[80] 2018-01-10 11:22:43.114332 [#72 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.114332 [#72 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.114332 [#72 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.114332 [#72 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,54706,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.119538 [#74 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.119538 [#74 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,54706,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[97] 2018-01-10 11:22:43.163857 [#75 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.163857 [#75 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.163857 [#75 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.163857 [#75 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,32142,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.167576 [#77 dnso1tcp-bighole.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.167576 [#77 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,32142,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -348,24 +348,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[80] 2018-01-10 11:22:43.211417 [#78 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.211417 [#78 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.211417 [#78 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.211417 [#78 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,41808,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.216686 [#80 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.216686 [#80 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,41808,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[97] 2018-01-10 11:22:43.260995 [#81 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.260995 [#81 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.260995 [#81 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.260995 [#81 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,18886,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.265047 [#83 dnso1tcp-bighole.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.265047 [#83 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,18886,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -373,24 +373,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[80] 2018-01-10 11:22:43.310017 [#84 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.310017 [#84 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.310017 [#84 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.310017 [#84 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,10624,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.313596 [#86 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.313596 [#86 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,10624,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[97] 2018-01-10 11:22:43.356802 [#87 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.356802 [#87 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.356802 [#87 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.356802 [#87 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,33139,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.360685 [#89 dnso1tcp-bighole.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.360685 [#89 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,33139,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -398,24 +398,24 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[80] 2018-01-10 11:22:43.406308 [#90 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.406308 [#90 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.406308 [#90 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.406308 [#90 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,61415,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.410191 [#92 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.410191 [#92 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,61415,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[97] 2018-01-10 11:22:43.454193 [#93 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.454193 [#93 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[97] 2018-01-10 11:22:43.454193 [#93 dnso1tcp-bighole.pcap-dist 4095] \ +[97] 2018-01-10 11:22:43.454193 [#93 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,59258,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[197] 2018-01-10 11:22:43.458191 [#95 dnso1tcp-bighole.pcap-dist 4095] \ +[197] 2018-01-10 11:22:43.458191 [#95 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,59258,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -423,18 +423,18 @@ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f206.1e100.net. \ 206.218.58.216.in-addr.arpa.,IN,PTR,21597,dfw06s47-in-f14.1e100.net. 0 0 -[80] 2018-01-10 11:22:43.503242 [#96 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.503242 [#96 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[80] 2018-01-10 11:22:43.503242 [#96 dnso1tcp-bighole.pcap-dist 4095] \ +[80] 2018-01-10 11:22:43.503242 [#96 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 \ dns QUERY,NOERROR,17700,rd \ 1 google.com.,IN,A 0 0 0 -[98] 2018-01-10 11:22:43.506884 [#98 dnso1tcp-bighole.pcap-dist 4095] \ +[98] 2018-01-10 11:22:43.506884 [#98 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 \ dns QUERY,NOERROR,17700,qr|rd|ra \ 1 google.com.,IN,A \ 1 google.com.,IN,A,56,216.58.211.142 0 0 -[52] 2018-01-10 11:22:43.507821 [#99 dnso1tcp-bighole.pcap-dist 4095] \ +[52] 2018-01-10 11:22:43.507821 [#99 dnso1tcp-bighole.pcap 4095] \ [172.17.0.8].51388 [8.8.8.8].53 -[52] 2018-01-10 11:22:43.511351 [#100 dnso1tcp-bighole.pcap-dist 4095] \ +[52] 2018-01-10 11:22:43.511351 [#100 dnso1tcp-bighole.pcap 4095] \ [8.8.8.8].53 [172.17.0.8].51388 diff --git a/src/test/test8.sh b/src/test/test8.sh index e091ff6..99c726e 100755 --- a/src/test/test8.sh +++ b/src/test/test8.sh @@ -2,12 +2,16 @@ rm -f test8.out test8.layer.out -for what in dnsotcp-many1pkt.pcap-dist dnsotcp-manyopkts.pcap-dist; do +for what in dnsotcp-many1pkt.pcap dnsotcp-manyopkts.pcap; do + test -e "$what" || ln -s "$srcdir/$what" "$what" + ../dnscap -r "$what" -g -T -o reassemble_tcp=yes 2>>test8.out ../dnscap -r "$what" -g -T -o reassemble_tcp=yes -o use_layers=yes 2>>test8.layer.out done -for what in dnso1tcp-bighole.pcap-dist; do +for what in dnso1tcp-bighole.pcap; do + test -e "$what" || ln -s "$srcdir/$what" "$what" + ../dnscap -r "$what" -g -T -o reassemble_tcp=yes -o allow_reset_tcpstate=yes 2>>test8.out ../dnscap -r "$what" -g -T -o reassemble_tcp=yes -o allow_reset_tcpstate=yes -o use_layers=yes 2>>test8.layer.out done diff --git a/src/test/test9.gold b/src/test/test9.gold index 1c50c70..f3f69bf 100644 --- a/src/test/test9.gold +++ b/src/test/test9.gold @@ -1,8 +1,8 @@ -[56] 2016-10-20 15:23:52.860937 [#0 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:52.860937 [#0 dns.pcap 4095] \ [172.17.0.10].40953 [8.8.8.8].53 \ dns QUERY,NOERROR,22531,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:52.863771 [#1 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:52.863771 [#1 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40953 \ dns QUERY,NOERROR,22531,qr|rd|ra \ 1 google.com.,IN,A \ @@ -15,11 +15,11 @@ ns1.google.com.,IN,A,331830,216.239.32.10 \ ns3.google.com.,IN,A,157828,216.239.36.10 \ ns4.google.com.,IN,A,157828,216.239.38.10 -[56] 2016-10-20 15:23:59.083869 [#2 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:59.083869 [#2 dns.pcap 4095] \ [172.17.0.10].45174 [8.8.8.8].53 \ dns QUERY,NOERROR,58510,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:59.086104 [#3 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:59.086104 [#3 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45174 \ dns QUERY,NOERROR,58510,qr|rd|ra \ 1 google.com.,IN,A \ @@ -32,11 +32,11 @@ ns1.google.com.,IN,A,331824,216.239.32.10 \ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 -[73] 2016-10-20 15:23:59.090911 [#4 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:59.090911 [#4 dns.pcap 4095] \ [172.17.0.10].33916 [8.8.8.8].53 \ dns QUERY,NOERROR,45248,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:59.092204 [#5 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:59.092204 [#5 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].33916 \ dns QUERY,NOERROR,45248,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -50,11 +50,11 @@ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 \ ns2.google.com.,IN,A,157822,216.239.34.10 -[56] 2016-10-20 15:23:52.860937 [#0 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:52.860937 [#0 dns.pcap 4095] \ [172.17.0.10].40953 [8.8.8.8].53 \ dns QUERY,NOERROR,22531,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:52.863771 [#1 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:52.863771 [#1 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40953 \ dns QUERY,NOERROR,22531,qr|rd|ra \ 1 google.com.,IN,A \ @@ -67,11 +67,11 @@ ns1.google.com.,IN,A,331830,216.239.32.10 \ ns3.google.com.,IN,A,157828,216.239.36.10 \ ns4.google.com.,IN,A,157828,216.239.38.10 -[56] 2016-10-20 15:23:59.083869 [#2 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:59.083869 [#2 dns.pcap 4095] \ [172.17.0.10].45174 [8.8.8.8].53 \ dns QUERY,NOERROR,58510,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:59.086104 [#3 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:59.086104 [#3 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45174 \ dns QUERY,NOERROR,58510,qr|rd|ra \ 1 google.com.,IN,A \ @@ -84,11 +84,11 @@ ns1.google.com.,IN,A,331824,216.239.32.10 \ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 -[73] 2016-10-20 15:23:59.090911 [#4 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:59.090911 [#4 dns.pcap 4095] \ [172.17.0.10].33916 [8.8.8.8].53 \ dns QUERY,NOERROR,45248,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:59.092204 [#5 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:59.092204 [#5 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].33916 \ dns QUERY,NOERROR,45248,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ diff --git a/src/test/test9.sh b/src/test/test9.sh index aff7610..3478256 100755 --- a/src/test/test9.sh +++ b/src/test/test9.sh @@ -1,6 +1,8 @@ #!/bin/sh -xe -../dnscap -r dns.pcap-dist -g -B '2016-10-20 15:23:30' -E '2016-10-20 15:24:00' 2>test9.out -../dnscap -r dns.pcap-dist -o use_layers=yes -g -B '2016-10-20 15:23:30' -E '2016-10-20 15:24:00' 2>>test9.out +test -e dns.pcap || ln -s "$srcdir/dns.pcap" dns.pcap + +../dnscap -r dns.pcap -g -B '2016-10-20 15:23:30' -E '2016-10-20 15:24:00' 2>test9.out +../dnscap -r dns.pcap -o use_layers=yes -g -B '2016-10-20 15:23:30' -E '2016-10-20 15:24:00' 2>>test9.out diff test9.out "$srcdir/test9.gold" diff --git a/src/test/test_edns.sh b/src/test/test_edns.sh new file mode 100755 index 0000000..adb256a --- /dev/null +++ b/src/test/test_edns.sh @@ -0,0 +1,11 @@ +#!/bin/sh -xe + +test -e edns.pcap || ln -s "$srcdir/edns.pcap" edns.pcap + +../dnscap -g -r edns.pcap 2>edns.out + +mv edns.out edns.out.old +grep -v "^libgcov profiling error:" edns.out.old > edns.out +rm edns.out.old + +diff edns.out "$srcdir/edns.gold" diff --git a/src/test/test_regex_match.gold b/src/test/test_regex_match.gold index 891f731..7037e48 100644 --- a/src/test/test_regex_match.gold +++ b/src/test/test_regex_match.gold @@ -1,4 +1,4 @@ -[208] 2016-10-20 15:23:01.077982 [#0 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:01.077982 [#0 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53199 \ dns QUERY,NOERROR,59311,qr|rd|ra \ 1 google.com.,IN,A \ @@ -11,7 +11,7 @@ ns1.google.com.,IN,A,331882,216.239.32.10 \ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 -[289] 2016-10-20 15:23:01.084107 [#1 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:01.084107 [#1 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].57822 \ dns QUERY,NOERROR,35665,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -25,7 +25,7 @@ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 \ ns2.google.com.,IN,A,157880,216.239.34.10 -[208] 2016-10-20 15:23:01.088733 [#2 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:01.088733 [#2 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40043 \ dns QUERY,NOERROR,5337,qr|rd|ra \ 1 google.com.,IN,A \ @@ -38,7 +38,7 @@ ns1.google.com.,IN,A,331882,216.239.32.10 \ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 -[208] 2016-10-20 15:23:10.323399 [#3 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:10.323399 [#3 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37953 \ dns QUERY,NOERROR,22982,qr|rd|ra \ 1 google.com.,IN,A \ @@ -51,7 +51,7 @@ ns1.google.com.,IN,A,331872,216.239.32.10 \ ns3.google.com.,IN,A,157870,216.239.36.10 \ ns4.google.com.,IN,A,157870,216.239.38.10 -[289] 2016-10-20 15:23:10.329572 [#4 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:10.329572 [#4 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].48658 \ dns QUERY,NOERROR,18718,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -65,7 +65,7 @@ ns3.google.com.,IN,A,157870,216.239.36.10 \ ns4.google.com.,IN,A,157870,216.239.38.10 \ ns2.google.com.,IN,A,157870,216.239.34.10 -[208] 2016-10-20 15:23:52.863771 [#5 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:52.863771 [#5 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40953 \ dns QUERY,NOERROR,22531,qr|rd|ra \ 1 google.com.,IN,A \ @@ -78,7 +78,7 @@ ns1.google.com.,IN,A,331830,216.239.32.10 \ ns3.google.com.,IN,A,157828,216.239.36.10 \ ns4.google.com.,IN,A,157828,216.239.38.10 -[208] 2016-10-20 15:23:59.086104 [#6 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:23:59.086104 [#6 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45174 \ dns QUERY,NOERROR,58510,qr|rd|ra \ 1 google.com.,IN,A \ @@ -91,7 +91,7 @@ ns1.google.com.,IN,A,331824,216.239.32.10 \ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 -[289] 2016-10-20 15:23:59.092204 [#7 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:23:59.092204 [#7 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].33916 \ dns QUERY,NOERROR,45248,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -105,7 +105,7 @@ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 \ ns2.google.com.,IN,A,157822,216.239.34.10 -[208] 2016-10-20 15:24:04.325597 [#8 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:04.325597 [#8 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].43559 \ dns QUERY,NOERROR,49483,qr|rd|ra \ 1 google.com.,IN,A \ @@ -118,7 +118,7 @@ ns1.google.com.,IN,A,331818,216.239.32.10 \ ns3.google.com.,IN,A,157816,216.239.36.10 \ ns4.google.com.,IN,A,157816,216.239.38.10 -[208] 2016-10-20 15:24:06.333743 [#9 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:06.333743 [#9 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].54859 \ dns QUERY,NOERROR,31669,qr|rd|ra \ 1 google.com.,IN,A \ @@ -131,7 +131,7 @@ ns1.google.com.,IN,A,331816,216.239.32.10 \ ns3.google.com.,IN,A,157814,216.239.36.10 \ ns4.google.com.,IN,A,157814,216.239.38.10 -[289] 2016-10-20 15:24:06.340820 [#10 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:06.340820 [#10 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].58176 \ dns QUERY,NOERROR,25433,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -145,7 +145,7 @@ ns3.google.com.,IN,A,157814,216.239.36.10 \ ns4.google.com.,IN,A,157814,216.239.38.10 \ ns2.google.com.,IN,A,157814,216.239.34.10 -[208] 2016-10-20 15:24:07.348160 [#11 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:07.348160 [#11 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41266 \ dns QUERY,NOERROR,63798,qr|rd|ra \ 1 google.com.,IN,A \ @@ -158,7 +158,7 @@ ns1.google.com.,IN,A,331815,216.239.32.10 \ ns3.google.com.,IN,A,157813,216.239.36.10 \ ns4.google.com.,IN,A,157813,216.239.38.10 -[289] 2016-10-20 15:24:07.354682 [#12 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:07.354682 [#12 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].34607 \ dns QUERY,NOERROR,8470,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -172,7 +172,7 @@ ns3.google.com.,IN,A,157813,216.239.36.10 \ ns4.google.com.,IN,A,157813,216.239.38.10 \ ns2.google.com.,IN,A,157813,216.239.34.10 -[208] 2016-10-20 15:24:08.362206 [#13 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:08.362206 [#13 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60437 \ dns QUERY,NOERROR,60258,qr|rd|ra \ 1 google.com.,IN,A \ @@ -185,7 +185,7 @@ ns1.google.com.,IN,A,331814,216.239.32.10 \ ns3.google.com.,IN,A,157812,216.239.36.10 \ ns4.google.com.,IN,A,157812,216.239.38.10 -[289] 2016-10-20 15:24:08.370119 [#14 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:08.370119 [#14 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37149 \ dns QUERY,NOERROR,44985,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -199,7 +199,7 @@ ns3.google.com.,IN,A,157812,216.239.36.10 \ ns4.google.com.,IN,A,157812,216.239.38.10 \ ns2.google.com.,IN,A,157812,216.239.34.10 -[208] 2016-10-20 15:24:09.378425 [#15 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:09.378425 [#15 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53820 \ dns QUERY,NOERROR,45512,qr|rd|ra \ 1 google.com.,IN,A \ @@ -212,7 +212,7 @@ ns1.google.com.,IN,A,331813,216.239.32.10 \ ns3.google.com.,IN,A,157811,216.239.36.10 \ ns4.google.com.,IN,A,157811,216.239.38.10 -[289] 2016-10-20 15:24:09.385463 [#16 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:09.385463 [#16 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].52368 \ dns QUERY,NOERROR,22980,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -226,7 +226,7 @@ ns3.google.com.,IN,A,157811,216.239.36.10 \ ns4.google.com.,IN,A,157811,216.239.38.10 \ ns2.google.com.,IN,A,157811,216.239.34.10 -[208] 2016-10-20 15:24:10.392886 [#17 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:10.392886 [#17 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].47637 \ dns QUERY,NOERROR,1834,qr|rd|ra \ 1 google.com.,IN,A \ @@ -239,7 +239,7 @@ ns1.google.com.,IN,A,331812,216.239.32.10 \ ns3.google.com.,IN,A,157810,216.239.36.10 \ ns4.google.com.,IN,A,157810,216.239.38.10 -[289] 2016-10-20 15:24:10.400317 [#18 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:10.400317 [#18 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].34426 \ dns QUERY,NOERROR,25431,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -253,7 +253,7 @@ ns3.google.com.,IN,A,157810,216.239.36.10 \ ns4.google.com.,IN,A,157810,216.239.38.10 \ ns2.google.com.,IN,A,157810,216.239.34.10 -[208] 2016-10-20 15:24:11.407460 [#19 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:11.407460 [#19 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41059 \ dns QUERY,NOERROR,48432,qr|rd|ra \ 1 google.com.,IN,A \ @@ -266,7 +266,7 @@ ns1.google.com.,IN,A,331811,216.239.32.10 \ ns3.google.com.,IN,A,157809,216.239.36.10 \ ns4.google.com.,IN,A,157809,216.239.38.10 -[289] 2016-10-20 15:24:11.413370 [#20 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:11.413370 [#20 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].51181 \ dns QUERY,NOERROR,47411,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -280,7 +280,7 @@ ns3.google.com.,IN,A,157809,216.239.36.10 \ ns4.google.com.,IN,A,157809,216.239.38.10 \ ns2.google.com.,IN,A,157809,216.239.34.10 -[208] 2016-10-20 15:24:12.421228 [#21 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:12.421228 [#21 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].32976 \ dns QUERY,NOERROR,12038,qr|rd|ra \ 1 google.com.,IN,A \ @@ -293,7 +293,7 @@ ns1.google.com.,IN,A,331810,216.239.32.10 \ ns3.google.com.,IN,A,157808,216.239.36.10 \ ns4.google.com.,IN,A,157808,216.239.38.10 -[208] 2016-10-20 15:24:14.429863 [#22 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:14.429863 [#22 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].53467 \ dns QUERY,NOERROR,11614,qr|rd|ra \ 1 google.com.,IN,A \ @@ -306,7 +306,7 @@ ns1.google.com.,IN,A,331808,216.239.32.10 \ ns3.google.com.,IN,A,157806,216.239.36.10 \ ns4.google.com.,IN,A,157806,216.239.38.10 -[208] 2016-10-20 15:24:16.437471 [#23 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:16.437471 [#23 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].41532 \ dns QUERY,NOERROR,59173,qr|rd|ra \ 1 google.com.,IN,A \ @@ -319,7 +319,7 @@ ns1.google.com.,IN,A,331806,216.239.32.10 \ ns3.google.com.,IN,A,157804,216.239.36.10 \ ns4.google.com.,IN,A,157804,216.239.38.10 -[208] 2016-10-20 15:24:18.446775 [#24 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:18.446775 [#24 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].44982 \ dns QUERY,NOERROR,45535,qr|rd|ra \ 1 google.com.,IN,A \ @@ -332,7 +332,7 @@ ns1.google.com.,IN,A,331804,216.239.32.10 \ ns3.google.com.,IN,A,157802,216.239.36.10 \ ns4.google.com.,IN,A,157802,216.239.38.10 -[289] 2016-10-20 15:24:18.454030 [#25 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:18.454030 [#25 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].40224 \ dns QUERY,NOERROR,60808,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -346,7 +346,7 @@ ns3.google.com.,IN,A,157802,216.239.36.10 \ ns4.google.com.,IN,A,157802,216.239.38.10 \ ns2.google.com.,IN,A,157802,216.239.34.10 -[208] 2016-10-20 15:24:19.462224 [#26 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:19.462224 [#26 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45658 \ dns QUERY,NOERROR,64325,qr|rd|ra \ 1 google.com.,IN,A \ @@ -359,7 +359,7 @@ ns1.google.com.,IN,A,331803,216.239.32.10 \ ns3.google.com.,IN,A,157801,216.239.36.10 \ ns4.google.com.,IN,A,157801,216.239.38.10 -[289] 2016-10-20 15:24:19.468895 [#27 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:19.468895 [#27 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60457 \ dns QUERY,NOERROR,25543,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -373,7 +373,7 @@ ns3.google.com.,IN,A,157801,216.239.36.10 \ ns4.google.com.,IN,A,157801,216.239.38.10 \ ns2.google.com.,IN,A,157801,216.239.34.10 -[208] 2016-10-20 15:24:20.476841 [#28 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:20.476841 [#28 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].59762 \ dns QUERY,NOERROR,20736,qr|rd|ra \ 1 google.com.,IN,A \ @@ -386,7 +386,7 @@ ns1.google.com.,IN,A,331802,216.239.32.10 \ ns3.google.com.,IN,A,157800,216.239.36.10 \ ns4.google.com.,IN,A,157800,216.239.38.10 -[289] 2016-10-20 15:24:20.483927 [#29 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:20.483927 [#29 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].56022 \ dns QUERY,NOERROR,25911,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -400,7 +400,7 @@ ns3.google.com.,IN,A,157800,216.239.36.10 \ ns4.google.com.,IN,A,157800,216.239.38.10 \ ns2.google.com.,IN,A,157800,216.239.34.10 -[208] 2016-10-20 15:24:21.490573 [#30 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:21.490573 [#30 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].37669 \ dns QUERY,NOERROR,64358,qr|rd|ra \ 1 google.com.,IN,A \ @@ -413,7 +413,7 @@ ns1.google.com.,IN,A,331801,216.239.32.10 \ ns3.google.com.,IN,A,157799,216.239.36.10 \ ns4.google.com.,IN,A,157799,216.239.38.10 -[289] 2016-10-20 15:24:21.496815 [#31 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:21.496815 [#31 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].42978 \ dns QUERY,NOERROR,37698,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -427,7 +427,7 @@ ns3.google.com.,IN,A,157799,216.239.36.10 \ ns4.google.com.,IN,A,157799,216.239.38.10 \ ns2.google.com.,IN,A,157799,216.239.34.10 -[208] 2016-10-20 15:24:22.504738 [#32 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:22.504738 [#32 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].49829 \ dns QUERY,NOERROR,54706,qr|rd|ra \ 1 google.com.,IN,A \ @@ -440,7 +440,7 @@ ns1.google.com.,IN,A,331800,216.239.32.10 \ ns3.google.com.,IN,A,157798,216.239.36.10 \ ns4.google.com.,IN,A,157798,216.239.38.10 -[289] 2016-10-20 15:24:22.511746 [#33 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:22.511746 [#33 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].50599 \ dns QUERY,NOERROR,32142,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -454,7 +454,7 @@ ns3.google.com.,IN,A,157798,216.239.36.10 \ ns4.google.com.,IN,A,157798,216.239.38.10 \ ns2.google.com.,IN,A,157798,216.239.34.10 -[208] 2016-10-20 15:24:23.521976 [#34 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:23.521976 [#34 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].44980 \ dns QUERY,NOERROR,41808,qr|rd|ra \ 1 google.com.,IN,A \ @@ -467,7 +467,7 @@ ns1.google.com.,IN,A,331799,216.239.32.10 \ ns3.google.com.,IN,A,157797,216.239.36.10 \ ns4.google.com.,IN,A,157797,216.239.38.10 -[289] 2016-10-20 15:24:23.529385 [#35 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:23.529385 [#35 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60063 \ dns QUERY,NOERROR,18886,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -481,7 +481,7 @@ ns3.google.com.,IN,A,157797,216.239.36.10 \ ns4.google.com.,IN,A,157797,216.239.38.10 \ ns2.google.com.,IN,A,157797,216.239.34.10 -[208] 2016-10-20 15:24:24.539398 [#36 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:24.539398 [#36 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].42042 \ dns QUERY,NOERROR,10624,qr|rd|ra \ 1 google.com.,IN,A \ @@ -494,7 +494,7 @@ ns1.google.com.,IN,A,331798,216.239.32.10 \ ns3.google.com.,IN,A,157796,216.239.36.10 \ ns4.google.com.,IN,A,157796,216.239.38.10 -[289] 2016-10-20 15:24:24.546172 [#37 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:24.546172 [#37 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].60469 \ dns QUERY,NOERROR,33139,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -508,7 +508,7 @@ ns3.google.com.,IN,A,157796,216.239.36.10 \ ns4.google.com.,IN,A,157796,216.239.38.10 \ ns2.google.com.,IN,A,157796,216.239.34.10 -[208] 2016-10-20 15:24:25.556513 [#38 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:25.556513 [#38 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].45703 \ dns QUERY,NOERROR,61415,qr|rd|ra \ 1 google.com.,IN,A \ @@ -521,7 +521,7 @@ ns1.google.com.,IN,A,331797,216.239.32.10 \ ns3.google.com.,IN,A,157795,216.239.36.10 \ ns4.google.com.,IN,A,157795,216.239.38.10 -[289] 2016-10-20 15:24:25.564509 [#39 dns.pcap-dist 4095] \ +[289] 2016-10-20 15:24:25.564509 [#39 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].33507 \ dns QUERY,NOERROR,59258,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -535,7 +535,7 @@ ns3.google.com.,IN,A,157795,216.239.36.10 \ ns4.google.com.,IN,A,157795,216.239.38.10 \ ns2.google.com.,IN,A,157795,216.239.34.10 -[208] 2016-10-20 15:24:26.574350 [#40 dns.pcap-dist 4095] \ +[208] 2016-10-20 15:24:26.574350 [#40 dns.pcap 4095] \ [8.8.8.8].53 [172.17.0.10].46798 \ dns QUERY,NOERROR,17700,qr|rd|ra \ 1 google.com.,IN,A \ @@ -548,167 +548,167 @@ ns1.google.com.,IN,A,331796,216.239.32.10 \ ns3.google.com.,IN,A,157794,216.239.36.10 \ ns4.google.com.,IN,A,157794,216.239.38.10 -[56] 2016-10-20 15:23:01.075993 [#0 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:01.075993 [#0 dns.pcap 4095] \ [172.17.0.10].53199 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:23:01.082865 [#1 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:01.082865 [#1 dns.pcap 4095] \ [172.17.0.10].57822 [8.8.8.8].53 \ dns QUERY,NOERROR,35665,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:23:01.087291 [#2 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:01.087291 [#2 dns.pcap 4095] \ [172.17.0.10].40043 [8.8.8.8].53 \ dns QUERY,NOERROR,5337,rd \ 1 google.com.,IN,A 0 0 0 -[56] 2016-10-20 15:23:10.322117 [#3 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:10.322117 [#3 dns.pcap 4095] \ [172.17.0.10].37953 [8.8.8.8].53 \ dns QUERY,NOERROR,22982,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:23:10.328324 [#4 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:10.328324 [#4 dns.pcap 4095] \ [172.17.0.10].48658 [8.8.8.8].53 \ dns QUERY,NOERROR,18718,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:23:52.860937 [#5 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:52.860937 [#5 dns.pcap 4095] \ [172.17.0.10].40953 [8.8.8.8].53 \ dns QUERY,NOERROR,22531,rd \ 1 google.com.,IN,A 0 0 0 -[56] 2016-10-20 15:23:59.083869 [#6 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:23:59.083869 [#6 dns.pcap 4095] \ [172.17.0.10].45174 [8.8.8.8].53 \ dns QUERY,NOERROR,58510,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:23:59.090911 [#7 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:23:59.090911 [#7 dns.pcap 4095] \ [172.17.0.10].33916 [8.8.8.8].53 \ dns QUERY,NOERROR,45248,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:04.323868 [#8 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:04.323868 [#8 dns.pcap 4095] \ [172.17.0.10].43559 [8.8.8.8].53 \ dns QUERY,NOERROR,49483,rd \ 1 google.com.,IN,A 0 0 0 -[56] 2016-10-20 15:24:06.332239 [#9 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:06.332239 [#9 dns.pcap 4095] \ [172.17.0.10].54859 [8.8.8.8].53 \ dns QUERY,NOERROR,31669,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:24:06.339145 [#10 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:06.339145 [#10 dns.pcap 4095] \ [172.17.0.10].58176 [8.8.8.8].53 \ dns QUERY,NOERROR,25433,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:07.346429 [#11 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:07.346429 [#11 dns.pcap 4095] \ [172.17.0.10].41266 [8.8.8.8].53 \ dns QUERY,NOERROR,63798,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:24:07.353123 [#12 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:07.353123 [#12 dns.pcap 4095] \ [172.17.0.10].34607 [8.8.8.8].53 \ dns QUERY,NOERROR,8470,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:08.360528 [#13 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:08.360528 [#13 dns.pcap 4095] \ [172.17.0.10].60437 [8.8.8.8].53 \ dns QUERY,NOERROR,60258,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:24:08.368516 [#14 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:08.368516 [#14 dns.pcap 4095] \ [172.17.0.10].37149 [8.8.8.8].53 \ dns QUERY,NOERROR,44985,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:09.375942 [#15 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:09.375942 [#15 dns.pcap 4095] \ [172.17.0.10].53820 [8.8.8.8].53 \ dns QUERY,NOERROR,45512,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:24:09.384057 [#16 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:09.384057 [#16 dns.pcap 4095] \ [172.17.0.10].52368 [8.8.8.8].53 \ dns QUERY,NOERROR,22980,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:10.391358 [#17 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:10.391358 [#17 dns.pcap 4095] \ [172.17.0.10].47637 [8.8.8.8].53 \ dns QUERY,NOERROR,1834,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:24:10.398099 [#18 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:10.398099 [#18 dns.pcap 4095] \ [172.17.0.10].34426 [8.8.8.8].53 \ dns QUERY,NOERROR,25431,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:11.406297 [#19 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:11.406297 [#19 dns.pcap 4095] \ [172.17.0.10].41059 [8.8.8.8].53 \ dns QUERY,NOERROR,48432,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:24:11.412133 [#20 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:11.412133 [#20 dns.pcap 4095] \ [172.17.0.10].51181 [8.8.8.8].53 \ dns QUERY,NOERROR,47411,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:12.419936 [#21 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:12.419936 [#21 dns.pcap 4095] \ [172.17.0.10].32976 [8.8.8.8].53 \ dns QUERY,NOERROR,12038,rd \ 1 google.com.,IN,A 0 0 0 -[56] 2016-10-20 15:24:14.428524 [#22 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:14.428524 [#22 dns.pcap 4095] \ [172.17.0.10].53467 [8.8.8.8].53 \ dns QUERY,NOERROR,11614,rd \ 1 google.com.,IN,A 0 0 0 -[56] 2016-10-20 15:24:16.435733 [#23 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:16.435733 [#23 dns.pcap 4095] \ [172.17.0.10].41532 [8.8.8.8].53 \ dns QUERY,NOERROR,59173,rd \ 1 google.com.,IN,A 0 0 0 -[56] 2016-10-20 15:24:18.445519 [#24 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:18.445519 [#24 dns.pcap 4095] \ [172.17.0.10].44982 [8.8.8.8].53 \ dns QUERY,NOERROR,45535,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:24:18.452451 [#25 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:18.452451 [#25 dns.pcap 4095] \ [172.17.0.10].40224 [8.8.8.8].53 \ dns QUERY,NOERROR,60808,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:19.460087 [#26 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:19.460087 [#26 dns.pcap 4095] \ [172.17.0.10].45658 [8.8.8.8].53 \ dns QUERY,NOERROR,64325,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:24:19.467324 [#27 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:19.467324 [#27 dns.pcap 4095] \ [172.17.0.10].60457 [8.8.8.8].53 \ dns QUERY,NOERROR,25543,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:20.475086 [#28 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:20.475086 [#28 dns.pcap 4095] \ [172.17.0.10].59762 [8.8.8.8].53 \ dns QUERY,NOERROR,20736,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:24:20.482188 [#29 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:20.482188 [#29 dns.pcap 4095] \ [172.17.0.10].56022 [8.8.8.8].53 \ dns QUERY,NOERROR,25911,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:21.489468 [#30 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:21.489468 [#30 dns.pcap 4095] \ [172.17.0.10].37669 [8.8.8.8].53 \ dns QUERY,NOERROR,64358,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:24:21.495324 [#31 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:21.495324 [#31 dns.pcap 4095] \ [172.17.0.10].42978 [8.8.8.8].53 \ dns QUERY,NOERROR,37698,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:22.502667 [#32 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:22.502667 [#32 dns.pcap 4095] \ [172.17.0.10].49829 [8.8.8.8].53 \ dns QUERY,NOERROR,54706,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:24:22.510176 [#33 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:22.510176 [#33 dns.pcap 4095] \ [172.17.0.10].50599 [8.8.8.8].53 \ dns QUERY,NOERROR,32142,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:23.520203 [#34 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:23.520203 [#34 dns.pcap 4095] \ [172.17.0.10].44980 [8.8.8.8].53 \ dns QUERY,NOERROR,41808,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:24:23.527449 [#35 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:23.527449 [#35 dns.pcap 4095] \ [172.17.0.10].60063 [8.8.8.8].53 \ dns QUERY,NOERROR,18886,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:24.537264 [#36 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:24.537264 [#36 dns.pcap 4095] \ [172.17.0.10].42042 [8.8.8.8].53 \ dns QUERY,NOERROR,10624,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:24:24.544538 [#37 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:24.544538 [#37 dns.pcap 4095] \ [172.17.0.10].60469 [8.8.8.8].53 \ dns QUERY,NOERROR,33139,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:25.554744 [#38 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:25.554744 [#38 dns.pcap 4095] \ [172.17.0.10].45703 [8.8.8.8].53 \ dns QUERY,NOERROR,61415,rd \ 1 google.com.,IN,A 0 0 0 -[73] 2016-10-20 15:24:25.562608 [#39 dns.pcap-dist 4095] \ +[73] 2016-10-20 15:24:25.562608 [#39 dns.pcap 4095] \ [172.17.0.10].33507 [8.8.8.8].53 \ dns QUERY,NOERROR,59258,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[56] 2016-10-20 15:24:26.572784 [#40 dns.pcap-dist 4095] \ +[56] 2016-10-20 15:24:26.572784 [#40 dns.pcap 4095] \ [172.17.0.10].46798 [8.8.8.8].53 \ dns QUERY,NOERROR,17700,rd \ 1 google.com.,IN,A 0 0 0 diff --git a/src/test/test_regex_match.sh b/src/test/test_regex_match.sh index 184ca7b..3159b8c 100755 --- a/src/test/test_regex_match.sh +++ b/src/test/test_regex_match.sh @@ -1,8 +1,8 @@ #!/bin/sh -xe -../dnscap -g -r dns.pcap-dist -x 'ns1' 2>test_regex_match.out -../dnscap -g -r dns.pcap-dist -X 'ns1' 2>>test_regex_match.out -../dnscap -g -r dns.pcap-dist -x 'ns1' -X 'ns1' 2>>test_regex_match.out +../dnscap -g -r dns.pcap -x 'ns1' 2>test_regex_match.out +../dnscap -g -r dns.pcap -X 'ns1' 2>>test_regex_match.out +../dnscap -g -r dns.pcap -x 'ns1' -X 'ns1' 2>>test_regex_match.out mv test_regex_match.out test_regex_match.out.old grep -v "^libgcov profiling error:" test_regex_match.out.old > test_regex_match.out diff --git a/src/test/vlan11.gold b/src/test/vlan11.gold index 92f8d39..29991d4 100644 --- a/src/test/vlan11.gold +++ b/src/test/vlan11.gold @@ -1,8 +1,8 @@ -[56] 2016-10-20 15:23:01.075993 [#0 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:23:01.075993 [#0 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].53199 [8.8.8.8].53 \ dns QUERY,NOERROR,59311,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:01.077982 [#1 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:23:01.077982 [#1 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].53199 \ dns QUERY,NOERROR,59311,qr|rd|ra \ 1 google.com.,IN,A \ @@ -15,11 +15,11 @@ ns1.google.com.,IN,A,331882,216.239.32.10 \ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 -[73] 2016-10-20 15:23:01.082865 [#2 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:23:01.082865 [#2 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].57822 [8.8.8.8].53 \ dns QUERY,NOERROR,35665,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:01.084107 [#3 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:23:01.084107 [#3 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].57822 \ dns QUERY,NOERROR,35665,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -33,11 +33,11 @@ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 \ ns2.google.com.,IN,A,157880,216.239.34.10 -[56] 2016-10-20 15:23:01.087291 [#4 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:23:01.087291 [#4 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].40043 [8.8.8.8].53 \ dns QUERY,NOERROR,5337,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:01.088733 [#5 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:23:01.088733 [#5 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].40043 \ dns QUERY,NOERROR,5337,qr|rd|ra \ 1 google.com.,IN,A \ @@ -50,11 +50,11 @@ ns1.google.com.,IN,A,331882,216.239.32.10 \ ns3.google.com.,IN,A,157880,216.239.36.10 \ ns4.google.com.,IN,A,157880,216.239.38.10 -[56] 2016-10-20 15:23:10.322117 [#6 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:23:10.322117 [#6 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].37953 [8.8.8.8].53 \ dns QUERY,NOERROR,22982,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:10.323399 [#7 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:23:10.323399 [#7 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].37953 \ dns QUERY,NOERROR,22982,qr|rd|ra \ 1 google.com.,IN,A \ @@ -67,11 +67,11 @@ ns1.google.com.,IN,A,331872,216.239.32.10 \ ns3.google.com.,IN,A,157870,216.239.36.10 \ ns4.google.com.,IN,A,157870,216.239.38.10 -[73] 2016-10-20 15:23:10.328324 [#8 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:23:10.328324 [#8 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].48658 [8.8.8.8].53 \ dns QUERY,NOERROR,18718,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:10.329572 [#9 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:23:10.329572 [#9 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].48658 \ dns QUERY,NOERROR,18718,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -85,11 +85,11 @@ ns3.google.com.,IN,A,157870,216.239.36.10 \ ns4.google.com.,IN,A,157870,216.239.38.10 \ ns2.google.com.,IN,A,157870,216.239.34.10 -[56] 2016-10-20 15:23:52.860937 [#10 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:23:52.860937 [#10 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].40953 [8.8.8.8].53 \ dns QUERY,NOERROR,22531,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:52.863771 [#11 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:23:52.863771 [#11 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].40953 \ dns QUERY,NOERROR,22531,qr|rd|ra \ 1 google.com.,IN,A \ @@ -102,11 +102,11 @@ ns1.google.com.,IN,A,331830,216.239.32.10 \ ns3.google.com.,IN,A,157828,216.239.36.10 \ ns4.google.com.,IN,A,157828,216.239.38.10 -[56] 2016-10-20 15:23:59.083869 [#12 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:23:59.083869 [#12 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].45174 [8.8.8.8].53 \ dns QUERY,NOERROR,58510,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:23:59.086104 [#13 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:23:59.086104 [#13 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].45174 \ dns QUERY,NOERROR,58510,qr|rd|ra \ 1 google.com.,IN,A \ @@ -119,11 +119,11 @@ ns1.google.com.,IN,A,331824,216.239.32.10 \ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 -[73] 2016-10-20 15:23:59.090911 [#14 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:23:59.090911 [#14 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].33916 [8.8.8.8].53 \ dns QUERY,NOERROR,45248,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:23:59.092204 [#15 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:23:59.092204 [#15 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].33916 \ dns QUERY,NOERROR,45248,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -137,11 +137,11 @@ ns3.google.com.,IN,A,157822,216.239.36.10 \ ns4.google.com.,IN,A,157822,216.239.38.10 \ ns2.google.com.,IN,A,157822,216.239.34.10 -[56] 2016-10-20 15:24:04.323868 [#16 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:04.323868 [#16 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].43559 [8.8.8.8].53 \ dns QUERY,NOERROR,49483,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:04.325597 [#17 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:04.325597 [#17 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].43559 \ dns QUERY,NOERROR,49483,qr|rd|ra \ 1 google.com.,IN,A \ @@ -154,11 +154,11 @@ ns1.google.com.,IN,A,331818,216.239.32.10 \ ns3.google.com.,IN,A,157816,216.239.36.10 \ ns4.google.com.,IN,A,157816,216.239.38.10 -[56] 2016-10-20 15:24:06.332239 [#18 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:06.332239 [#18 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].54859 [8.8.8.8].53 \ dns QUERY,NOERROR,31669,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:06.333743 [#19 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:06.333743 [#19 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].54859 \ dns QUERY,NOERROR,31669,qr|rd|ra \ 1 google.com.,IN,A \ @@ -171,11 +171,11 @@ ns1.google.com.,IN,A,331816,216.239.32.10 \ ns3.google.com.,IN,A,157814,216.239.36.10 \ ns4.google.com.,IN,A,157814,216.239.38.10 -[73] 2016-10-20 15:24:06.339145 [#20 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:24:06.339145 [#20 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].58176 [8.8.8.8].53 \ dns QUERY,NOERROR,25433,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:06.340820 [#21 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:24:06.340820 [#21 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].58176 \ dns QUERY,NOERROR,25433,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -189,11 +189,11 @@ ns3.google.com.,IN,A,157814,216.239.36.10 \ ns4.google.com.,IN,A,157814,216.239.38.10 \ ns2.google.com.,IN,A,157814,216.239.34.10 -[56] 2016-10-20 15:24:07.346429 [#22 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:07.346429 [#22 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].41266 [8.8.8.8].53 \ dns QUERY,NOERROR,63798,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:07.348160 [#23 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:07.348160 [#23 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].41266 \ dns QUERY,NOERROR,63798,qr|rd|ra \ 1 google.com.,IN,A \ @@ -206,11 +206,11 @@ ns1.google.com.,IN,A,331815,216.239.32.10 \ ns3.google.com.,IN,A,157813,216.239.36.10 \ ns4.google.com.,IN,A,157813,216.239.38.10 -[73] 2016-10-20 15:24:07.353123 [#24 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:24:07.353123 [#24 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].34607 [8.8.8.8].53 \ dns QUERY,NOERROR,8470,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:07.354682 [#25 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:24:07.354682 [#25 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].34607 \ dns QUERY,NOERROR,8470,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -224,11 +224,11 @@ ns3.google.com.,IN,A,157813,216.239.36.10 \ ns4.google.com.,IN,A,157813,216.239.38.10 \ ns2.google.com.,IN,A,157813,216.239.34.10 -[56] 2016-10-20 15:24:08.360528 [#26 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:08.360528 [#26 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].60437 [8.8.8.8].53 \ dns QUERY,NOERROR,60258,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:08.362206 [#27 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:08.362206 [#27 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].60437 \ dns QUERY,NOERROR,60258,qr|rd|ra \ 1 google.com.,IN,A \ @@ -241,11 +241,11 @@ ns1.google.com.,IN,A,331814,216.239.32.10 \ ns3.google.com.,IN,A,157812,216.239.36.10 \ ns4.google.com.,IN,A,157812,216.239.38.10 -[73] 2016-10-20 15:24:08.368516 [#28 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:24:08.368516 [#28 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].37149 [8.8.8.8].53 \ dns QUERY,NOERROR,44985,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:08.370119 [#29 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:24:08.370119 [#29 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].37149 \ dns QUERY,NOERROR,44985,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -259,11 +259,11 @@ ns3.google.com.,IN,A,157812,216.239.36.10 \ ns4.google.com.,IN,A,157812,216.239.38.10 \ ns2.google.com.,IN,A,157812,216.239.34.10 -[56] 2016-10-20 15:24:09.375942 [#30 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:09.375942 [#30 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].53820 [8.8.8.8].53 \ dns QUERY,NOERROR,45512,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:09.378425 [#31 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:09.378425 [#31 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].53820 \ dns QUERY,NOERROR,45512,qr|rd|ra \ 1 google.com.,IN,A \ @@ -276,11 +276,11 @@ ns1.google.com.,IN,A,331813,216.239.32.10 \ ns3.google.com.,IN,A,157811,216.239.36.10 \ ns4.google.com.,IN,A,157811,216.239.38.10 -[73] 2016-10-20 15:24:09.384057 [#32 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:24:09.384057 [#32 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].52368 [8.8.8.8].53 \ dns QUERY,NOERROR,22980,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:09.385463 [#33 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:24:09.385463 [#33 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].52368 \ dns QUERY,NOERROR,22980,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -294,11 +294,11 @@ ns3.google.com.,IN,A,157811,216.239.36.10 \ ns4.google.com.,IN,A,157811,216.239.38.10 \ ns2.google.com.,IN,A,157811,216.239.34.10 -[56] 2016-10-20 15:24:10.391358 [#34 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:10.391358 [#34 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].47637 [8.8.8.8].53 \ dns QUERY,NOERROR,1834,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:10.392886 [#35 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:10.392886 [#35 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].47637 \ dns QUERY,NOERROR,1834,qr|rd|ra \ 1 google.com.,IN,A \ @@ -311,11 +311,11 @@ ns1.google.com.,IN,A,331812,216.239.32.10 \ ns3.google.com.,IN,A,157810,216.239.36.10 \ ns4.google.com.,IN,A,157810,216.239.38.10 -[73] 2016-10-20 15:24:10.398099 [#36 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:24:10.398099 [#36 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].34426 [8.8.8.8].53 \ dns QUERY,NOERROR,25431,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:10.400317 [#37 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:24:10.400317 [#37 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].34426 \ dns QUERY,NOERROR,25431,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -329,11 +329,11 @@ ns3.google.com.,IN,A,157810,216.239.36.10 \ ns4.google.com.,IN,A,157810,216.239.38.10 \ ns2.google.com.,IN,A,157810,216.239.34.10 -[56] 2016-10-20 15:24:11.406297 [#38 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:11.406297 [#38 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].41059 [8.8.8.8].53 \ dns QUERY,NOERROR,48432,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:11.407460 [#39 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:11.407460 [#39 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].41059 \ dns QUERY,NOERROR,48432,qr|rd|ra \ 1 google.com.,IN,A \ @@ -346,11 +346,11 @@ ns1.google.com.,IN,A,331811,216.239.32.10 \ ns3.google.com.,IN,A,157809,216.239.36.10 \ ns4.google.com.,IN,A,157809,216.239.38.10 -[73] 2016-10-20 15:24:11.412133 [#40 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:24:11.412133 [#40 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].51181 [8.8.8.8].53 \ dns QUERY,NOERROR,47411,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:11.413370 [#41 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:24:11.413370 [#41 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].51181 \ dns QUERY,NOERROR,47411,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -364,11 +364,11 @@ ns3.google.com.,IN,A,157809,216.239.36.10 \ ns4.google.com.,IN,A,157809,216.239.38.10 \ ns2.google.com.,IN,A,157809,216.239.34.10 -[56] 2016-10-20 15:24:12.419936 [#42 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:12.419936 [#42 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].32976 [8.8.8.8].53 \ dns QUERY,NOERROR,12038,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:12.421228 [#43 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:12.421228 [#43 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].32976 \ dns QUERY,NOERROR,12038,qr|rd|ra \ 1 google.com.,IN,A \ @@ -381,11 +381,11 @@ ns1.google.com.,IN,A,331810,216.239.32.10 \ ns3.google.com.,IN,A,157808,216.239.36.10 \ ns4.google.com.,IN,A,157808,216.239.38.10 -[56] 2016-10-20 15:24:14.428524 [#44 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:14.428524 [#44 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].53467 [8.8.8.8].53 \ dns QUERY,NOERROR,11614,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:14.429863 [#45 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:14.429863 [#45 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].53467 \ dns QUERY,NOERROR,11614,qr|rd|ra \ 1 google.com.,IN,A \ @@ -398,11 +398,11 @@ ns1.google.com.,IN,A,331808,216.239.32.10 \ ns3.google.com.,IN,A,157806,216.239.36.10 \ ns4.google.com.,IN,A,157806,216.239.38.10 -[56] 2016-10-20 15:24:16.435733 [#46 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:16.435733 [#46 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].41532 [8.8.8.8].53 \ dns QUERY,NOERROR,59173,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:16.437471 [#47 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:16.437471 [#47 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].41532 \ dns QUERY,NOERROR,59173,qr|rd|ra \ 1 google.com.,IN,A \ @@ -415,11 +415,11 @@ ns1.google.com.,IN,A,331806,216.239.32.10 \ ns3.google.com.,IN,A,157804,216.239.36.10 \ ns4.google.com.,IN,A,157804,216.239.38.10 -[56] 2016-10-20 15:24:18.445519 [#48 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:18.445519 [#48 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].44982 [8.8.8.8].53 \ dns QUERY,NOERROR,45535,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:18.446775 [#49 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:18.446775 [#49 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].44982 \ dns QUERY,NOERROR,45535,qr|rd|ra \ 1 google.com.,IN,A \ @@ -432,11 +432,11 @@ ns1.google.com.,IN,A,331804,216.239.32.10 \ ns3.google.com.,IN,A,157802,216.239.36.10 \ ns4.google.com.,IN,A,157802,216.239.38.10 -[73] 2016-10-20 15:24:18.452451 [#50 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:24:18.452451 [#50 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].40224 [8.8.8.8].53 \ dns QUERY,NOERROR,60808,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:18.454030 [#51 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:24:18.454030 [#51 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].40224 \ dns QUERY,NOERROR,60808,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -450,11 +450,11 @@ ns3.google.com.,IN,A,157802,216.239.36.10 \ ns4.google.com.,IN,A,157802,216.239.38.10 \ ns2.google.com.,IN,A,157802,216.239.34.10 -[56] 2016-10-20 15:24:19.460087 [#52 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:19.460087 [#52 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].45658 [8.8.8.8].53 \ dns QUERY,NOERROR,64325,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:19.462224 [#53 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:19.462224 [#53 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].45658 \ dns QUERY,NOERROR,64325,qr|rd|ra \ 1 google.com.,IN,A \ @@ -467,11 +467,11 @@ ns1.google.com.,IN,A,331803,216.239.32.10 \ ns3.google.com.,IN,A,157801,216.239.36.10 \ ns4.google.com.,IN,A,157801,216.239.38.10 -[73] 2016-10-20 15:24:19.467324 [#54 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:24:19.467324 [#54 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].60457 [8.8.8.8].53 \ dns QUERY,NOERROR,25543,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:19.468895 [#55 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:24:19.468895 [#55 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].60457 \ dns QUERY,NOERROR,25543,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -485,11 +485,11 @@ ns3.google.com.,IN,A,157801,216.239.36.10 \ ns4.google.com.,IN,A,157801,216.239.38.10 \ ns2.google.com.,IN,A,157801,216.239.34.10 -[56] 2016-10-20 15:24:20.475086 [#56 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:20.475086 [#56 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].59762 [8.8.8.8].53 \ dns QUERY,NOERROR,20736,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:20.476841 [#57 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:20.476841 [#57 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].59762 \ dns QUERY,NOERROR,20736,qr|rd|ra \ 1 google.com.,IN,A \ @@ -502,11 +502,11 @@ ns1.google.com.,IN,A,331802,216.239.32.10 \ ns3.google.com.,IN,A,157800,216.239.36.10 \ ns4.google.com.,IN,A,157800,216.239.38.10 -[73] 2016-10-20 15:24:20.482188 [#58 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:24:20.482188 [#58 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].56022 [8.8.8.8].53 \ dns QUERY,NOERROR,25911,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:20.483927 [#59 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:24:20.483927 [#59 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].56022 \ dns QUERY,NOERROR,25911,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -520,11 +520,11 @@ ns3.google.com.,IN,A,157800,216.239.36.10 \ ns4.google.com.,IN,A,157800,216.239.38.10 \ ns2.google.com.,IN,A,157800,216.239.34.10 -[56] 2016-10-20 15:24:21.489468 [#60 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:21.489468 [#60 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].37669 [8.8.8.8].53 \ dns QUERY,NOERROR,64358,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:21.490573 [#61 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:21.490573 [#61 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].37669 \ dns QUERY,NOERROR,64358,qr|rd|ra \ 1 google.com.,IN,A \ @@ -537,11 +537,11 @@ ns1.google.com.,IN,A,331801,216.239.32.10 \ ns3.google.com.,IN,A,157799,216.239.36.10 \ ns4.google.com.,IN,A,157799,216.239.38.10 -[73] 2016-10-20 15:24:21.495324 [#62 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:24:21.495324 [#62 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].42978 [8.8.8.8].53 \ dns QUERY,NOERROR,37698,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:21.496815 [#63 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:24:21.496815 [#63 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].42978 \ dns QUERY,NOERROR,37698,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -555,11 +555,11 @@ ns3.google.com.,IN,A,157799,216.239.36.10 \ ns4.google.com.,IN,A,157799,216.239.38.10 \ ns2.google.com.,IN,A,157799,216.239.34.10 -[56] 2016-10-20 15:24:22.502667 [#64 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:22.502667 [#64 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].49829 [8.8.8.8].53 \ dns QUERY,NOERROR,54706,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:22.504738 [#65 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:22.504738 [#65 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].49829 \ dns QUERY,NOERROR,54706,qr|rd|ra \ 1 google.com.,IN,A \ @@ -572,11 +572,11 @@ ns1.google.com.,IN,A,331800,216.239.32.10 \ ns3.google.com.,IN,A,157798,216.239.36.10 \ ns4.google.com.,IN,A,157798,216.239.38.10 -[73] 2016-10-20 15:24:22.510176 [#66 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:24:22.510176 [#66 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].50599 [8.8.8.8].53 \ dns QUERY,NOERROR,32142,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:22.511746 [#67 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:24:22.511746 [#67 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].50599 \ dns QUERY,NOERROR,32142,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -590,11 +590,11 @@ ns3.google.com.,IN,A,157798,216.239.36.10 \ ns4.google.com.,IN,A,157798,216.239.38.10 \ ns2.google.com.,IN,A,157798,216.239.34.10 -[56] 2016-10-20 15:24:23.520203 [#68 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:23.520203 [#68 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].44980 [8.8.8.8].53 \ dns QUERY,NOERROR,41808,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:23.521976 [#69 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:23.521976 [#69 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].44980 \ dns QUERY,NOERROR,41808,qr|rd|ra \ 1 google.com.,IN,A \ @@ -607,11 +607,11 @@ ns1.google.com.,IN,A,331799,216.239.32.10 \ ns3.google.com.,IN,A,157797,216.239.36.10 \ ns4.google.com.,IN,A,157797,216.239.38.10 -[73] 2016-10-20 15:24:23.527449 [#70 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:24:23.527449 [#70 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].60063 [8.8.8.8].53 \ dns QUERY,NOERROR,18886,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:23.529385 [#71 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:24:23.529385 [#71 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].60063 \ dns QUERY,NOERROR,18886,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -625,11 +625,11 @@ ns3.google.com.,IN,A,157797,216.239.36.10 \ ns4.google.com.,IN,A,157797,216.239.38.10 \ ns2.google.com.,IN,A,157797,216.239.34.10 -[56] 2016-10-20 15:24:24.537264 [#72 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:24.537264 [#72 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].42042 [8.8.8.8].53 \ dns QUERY,NOERROR,10624,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:24.539398 [#73 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:24.539398 [#73 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].42042 \ dns QUERY,NOERROR,10624,qr|rd|ra \ 1 google.com.,IN,A \ @@ -642,11 +642,11 @@ ns1.google.com.,IN,A,331798,216.239.32.10 \ ns3.google.com.,IN,A,157796,216.239.36.10 \ ns4.google.com.,IN,A,157796,216.239.38.10 -[73] 2016-10-20 15:24:24.544538 [#74 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:24:24.544538 [#74 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].60469 [8.8.8.8].53 \ dns QUERY,NOERROR,33139,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:24.546172 [#75 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:24:24.546172 [#75 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].60469 \ dns QUERY,NOERROR,33139,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -660,11 +660,11 @@ ns3.google.com.,IN,A,157796,216.239.36.10 \ ns4.google.com.,IN,A,157796,216.239.38.10 \ ns2.google.com.,IN,A,157796,216.239.34.10 -[56] 2016-10-20 15:24:25.554744 [#76 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:25.554744 [#76 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].45703 [8.8.8.8].53 \ dns QUERY,NOERROR,61415,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:25.556513 [#77 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:25.556513 [#77 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].45703 \ dns QUERY,NOERROR,61415,qr|rd|ra \ 1 google.com.,IN,A \ @@ -677,11 +677,11 @@ ns1.google.com.,IN,A,331797,216.239.32.10 \ ns3.google.com.,IN,A,157795,216.239.36.10 \ ns4.google.com.,IN,A,157795,216.239.38.10 -[73] 2016-10-20 15:24:25.562608 [#78 vlan11.pcap-dist (vlan 11) 11] \ +[73] 2016-10-20 15:24:25.562608 [#78 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].33507 [8.8.8.8].53 \ dns QUERY,NOERROR,59258,rd \ 1 206.218.58.216.in-addr.arpa.,IN,PTR 0 0 0 -[289] 2016-10-20 15:24:25.564509 [#79 vlan11.pcap-dist (vlan 11) 11] \ +[289] 2016-10-20 15:24:25.564509 [#79 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].33507 \ dns QUERY,NOERROR,59258,qr|rd|ra \ 1 206.218.58.216.in-addr.arpa.,IN,PTR \ @@ -695,11 +695,11 @@ ns3.google.com.,IN,A,157795,216.239.36.10 \ ns4.google.com.,IN,A,157795,216.239.38.10 \ ns2.google.com.,IN,A,157795,216.239.34.10 -[56] 2016-10-20 15:24:26.572784 [#80 vlan11.pcap-dist (vlan 11) 11] \ +[56] 2016-10-20 15:24:26.572784 [#80 vlan11.pcap (vlan 11) 11] \ [172.17.0.10].46798 [8.8.8.8].53 \ dns QUERY,NOERROR,17700,rd \ 1 google.com.,IN,A 0 0 0 -[208] 2016-10-20 15:24:26.574350 [#81 vlan11.pcap-dist (vlan 11) 11] \ +[208] 2016-10-20 15:24:26.574350 [#81 vlan11.pcap (vlan 11) 11] \ [8.8.8.8].53 [172.17.0.10].46798 \ dns QUERY,NOERROR,17700,qr|rd|ra \ 1 google.com.,IN,A \ |