[dnscap-users] DNSCAP release 1.7.1

Jerry Lundström jerry at dns-oarc.net
Tue Jan 2 07:54:43 UTC 2018

Hi all,

I seem to have forgot to send this last week, so here goes!

The library used for parsing DNS (libbind) is unable to parse DNS
messages when there is padding at the end (the UDP/TCP payload is larger
then the DNS message). This has been fixed by trying to find the actual
DNS message size, walking all labels and RR data, and then retry parsing.


Packages are available at:


Other changes and bug-fixes:
- Fix size when there is a VLAN to match output of `use_layers` yes/no
- Add test of VLAN matching
- Fix `hashtbl.c` building in `rssm`
- Add test with padded DNS message

49e5400 Fix #127: If `ns_initparse()` returns `EMSGSIZE`, try and get
        actual size and reparse
99bda0b Fix #98: VLAN


More information about the dnscap-users mailing list