mirror of
https://github.com/evilsocket/opensnitch.git
synced 2025-03-04 00:24:40 +01:00
21 lines
511 B
Go
21 lines
511 B
Go
package dns
|
|
|
|
import (
|
|
"github.com/evilsocket/opensnitch/daemon/netfilter"
|
|
"github.com/google/gopacket/layers"
|
|
)
|
|
|
|
// GetQuestions retrieves the domain names a process is trying to resolve.
|
|
func GetQuestions(nfp *netfilter.Packet) (questions []string) {
|
|
dnsLayer := nfp.Packet.Layer(layers.LayerTypeDNS)
|
|
if dnsLayer == nil {
|
|
return questions
|
|
}
|
|
|
|
dns, _ := dnsLayer.(*layers.DNS)
|
|
for _, dnsQuestion := range dns.Questions {
|
|
questions = append(questions, string(dnsQuestion.Name))
|
|
}
|
|
|
|
return questions
|
|
}
|