[dnscap-users] DNSCAP release 1.7.1

Jerry Lundström jerry at dns-oarc.net
Tue Jan 2 07:54:43 UTC 2018


Hi all,

I seem to have forgot to send this last week, so here goes!

The library used for parsing DNS (libbind) is unable to parse DNS
messages when there is padding at the end (the UDP/TCP payload is larger
then the DNS message). This has been fixed by trying to find the actual
DNS message size, walking all labels and RR data, and then retry parsing.

  https://www.dns-oarc.net/files/dnscap/dnscap-1.7.1.tar.gz
  a6839a0f5024947f764d1087244daabb7296447123b717c68d2574b673affb5f

Packages are available at:

  https://dev.dns-oarc.net/packages/

Other changes and bug-fixes:
- Fix size when there is a VLAN to match output of `use_layers` yes/no
- Add test of VLAN matching
- Fix `hashtbl.c` building in `rssm`
- Add test with padded DNS message

49e5400 Fix #127: If `ns_initparse()` returns `EMSGSIZE`, try and get
        actual size and reparse
99bda0b Fix #98: VLAN

Cheers,
Jerry


More information about the dnscap-users mailing list