dnsanalyzer

Documentation

Index

• type DNSAnalyzer
  • func New() *DNSAnalyzer
  • func (d *DNSAnalyzer) Hostnames(address string) []string
  • func (d *DNSAnalyzer) LayerTypes() []gopacket.LayerType
  • func (d *DNSAnalyzer) Questions() map[string]map[string][]string
  • func (d *DNSAnalyzer) Receive(l gopacket.Layer, p gopacket.Packet)

Types

type DNSAnalyzer

type DNSAnalyzer struct {
	// contains filtered or unexported fields
}

func New

func New() *DNSAnalyzer

func (*DNSAnalyzer) Hostnames

func (d *DNSAnalyzer) Hostnames(address string) []string

Hostname returns the hostname used to obtain the given IP address.

Returns the hostnames found. Otherwise it returns an empty slice.

func (*DNSAnalyzer) LayerTypes

func (d *DNSAnalyzer) LayerTypes() []gopacket.LayerType

func (*DNSAnalyzer) Questions

func (d *DNSAnalyzer) Questions() map[string]map[string][]string

Questions returns all the DNS queries captured during the analysis run.

Returns a map where each key is the DNS class (e.g. "IN" or "CH") and the value is a map where each key is a domain name (e.g. "example.com") and the values is an array of each type that was requested (e.g. "A", "AAAA", "TXT").

For example:

{
    "IN": map[string][]string{
        "example.com": []string{"A", "AAAA"},
        "example.org": []string{"TXT"},
    },
}

func (*DNSAnalyzer) Receive

func (d *DNSAnalyzer) Receive(l gopacket.Layer, p gopacket.Packet)