2 ms·
Well the iptables stuff is fair enough, I just don't see the need for the hex dump stuff as it exists in plenty of other tools. Also you can generate the bpf b
by easytiger 12y ago
Well the iptables stuff is fair enough, I just don't see the need for the hex dump stuff as it exists in plenty of other tools.
Also you can generate the bpf bc directly from tcpdump
tcpdump -p -ni eth0 -ddd "ip and udp"|tr "\n" ","
See: http://blog.cloudflare.com/bpf-the-forgotten-bytecode http://blog.cloudflare.com/bpf-the-forgotten-bytecode
- majke 12y agoI'm afraid Sir you are missing the point. - You can not generate BPF that matches DNS queries to "*.example.uk" with tcpdump. - It's hard to produce BPF that is usable by xt_bpf with tcpdump. - There are many tools that parse DNS requests, true. We just wanted to have a nice, flat, self contained script, without too many abstractions to allow us to experiment rapidly with different ways of matching the traffic.