mirror of
https://github.com/bettercap/bettercap
synced 2025-07-11 15:46:59 -07:00
34 lines
704 B
Go
34 lines
704 B
Go
package modules
|
|
|
|
import (
|
|
"github.com/evilsocket/bettercap-ng/core"
|
|
|
|
"github.com/google/gopacket"
|
|
"github.com/google/gopacket/layers"
|
|
)
|
|
|
|
func dnsParser(ip *layers.IPv4, pkt gopacket.Packet, udp *layers.UDP) bool {
|
|
dns, parsed := pkt.Layer(layers.LayerTypeDNS).(*layers.DNS)
|
|
if parsed == false {
|
|
return false
|
|
}
|
|
|
|
if dns.OpCode != layers.DNSOpCodeQuery || len(dns.Answers) == 0 {
|
|
return false
|
|
}
|
|
|
|
for _, a := range dns.Answers {
|
|
if a.IP == nil {
|
|
continue
|
|
}
|
|
SniffPrinter("[%s] %s %s > %s : %s is %s\n",
|
|
vTime(pkt.Metadata().Timestamp),
|
|
core.W(core.BG_DGRAY+core.FG_WHITE, "dns"),
|
|
vIP(ip.SrcIP),
|
|
vIP(ip.DstIP),
|
|
core.Yellow(string(a.Name)),
|
|
vIP(a.IP))
|
|
}
|
|
|
|
return true
|
|
}
|