3 ms·
Hmm, most of that is not required.
by easytiger 12y ago
Hmm, most of that is not required.
- jgrahamc 12y agoGreat. How should we simplify what we are doing?
- easytiger 12y agoWell the iptables stuff is fair enough, I just don't see the need for the hex dump stuff as it exists in plenty of other tools. Also you can generate the bpf bc directly from tcpdump tcpdump -p -ni eth0 -ddd "ip and udp"|tr "\n" "," See: http://blog.cloudflare.com/bpf-the-forgotten-bytecode http://blog.cloudflare.com/bpf-the-forgotten-bytecode
- majke 12y agoI'm afraid Sir you are missing the point. - You can not generate BPF that matches DNS queries to "*.example.uk" with tcpdump. - It's hard to produce BPF that is usable by xt_bpf with tcpdump. - There are many tools that parse DNS requests, true. We just wanted to have a nice, flat, self contained script, without too many abstractions to allow us to experiment rapidly with different ways of matching the traffic.