From adbff3257ad3507f458f2c68b785617b8874a9d6 Mon Sep 17 00:00:00 2001 From: geoffrey Date: Sun, 2 Feb 2025 18:31:52 +0100 Subject: [PATCH] Update --- dns-trace | Bin 1533480 -> 1945408 bytes jvetter.pcap | Bin 0 -> 319 bytes src/dns-trace.c | 74 +- src/dns-trace.ebpf.o | Bin 29416 -> 29448 bytes src/vmlinux.h | 70388 +++++++++++------------------------------ 5 files changed, 17703 insertions(+), 52759 deletions(-) create mode 100644 jvetter.pcap diff --git a/dns-trace b/dns-trace index 93ee4bc1de43e141bf06990c38da9cdf13b2d4be..48cbea0a355384effba16f60053fa24ae9409f15 100755 GIT binary patch literal 1945408 zcmeFad3+RA);?aH1tLVN5zwfptu|wDO&nkn0qrJfsFsdq1SBp)Wa!eN(<Ed@G(&%G-6EA&+;~zaIt0(c$C)50rtn!NY z1{YDjk|m}j@%y>aW(MoqD(|<*NA3GhKfGI{%XxXp>e=WvC0gH>zMQ{g@pY3Yp1)+# zxl0x=3)P-mn>YE~$rI13S$^IHtleXfjYf9nrE{eP+gf`conQIW)enwZchUE|f0%mr zYYV8}R0onrJoF)c`!K8kP3f#%j&*pFQV3g#e{Yt*zBK<^%~E4Z8}c~?!j2t+n8g3$ z>qvMr3OW*gB`SI(JR21~5>EPYBz#Gda&Jw-e_9fJMiM!1C81)@xR#_JE=tl5CnS-xF-bjNPSV~$5;?n*;J+lPXHAlF zFG#}w_ayj|ByyG};oq5r|C}WJyOZ$Wn54aBN#wL9>CcOj$iFs;oWCdGcPAP5KPKV- zOA`4dN%-d^;lDNs|H(<}Gd2nTv?TmHl9Veakuy69PTrgg|HO|kiTt!A^=V8p?yHjE z!;{E=D@i?{Nh0Szi_Hzg@IC5fC1 zlHik*$eEUe|Dq)QHY>@vrzMepcM?23iJU!2$~}+-Z%EQ_nMvgTHVHm83I14;`u{UY zzrC8IKJ$|BuS&unNz&eP!0*C8@#9NU|3H%Z|2~QQcOdvk^JsMvIoBm=motg{mL&We z!GF5gDA419kCIN3N(;?>kG0>B7Wn5BEm%}uU4H%InqYbLoT7py%a@hUS$N%&a%sVW z>z6KHwxA}susXP4fysJA#_}Z<3s#g@*DPMXOrq!Ng)0{=3@)VS$rBe`Umh&4TvRPx zPe~wZh_F2`3oT{jvhvzsO_?bHY*k>RBr6+}!Lu>xRzlg5g*7#%ghjPB0aQ*+uzJ~| zT9#N|UA?sC`h+;tchSO-nRFdmzbuimY=uV1!siBuIr1wzZP z!Ml;3%PJREOG|HDw76QTE?>B0$?`G@{XiwqU@cxm1uhCzNfqVGE2Iim`!bUa2}{bC z5qAyR00CCzk$~!9V3sXk0C@|8q(IkEXI0dcm*2?bqa`GN;q~P;i*I60UPh&?s9DC_ zn`mDJZyzd!PN^_Eu7bu2T`Hky>cr($L1}5CT4m@->MLqc)xuyUYEu?mRaL&=I;sy9 zT)u1t8iol{EiGPN7DVTiqcw|{E)Jp(mxh+1Go{593#diG<*0diE%ific?kVj0kIf& z*1eRK#D&mNs9D*KG!uf0F^Eg3sSt*2)R~+eS%c-d(*M*fuMSEJtFNzGP_?j{6d|}U zSWyFZ)U=Z0RHGl31($#y#SPZGeCg8VE6Oprq(v26 zML?69N=guH4@w9&N1W4L%R1Uoe>K0#py56dtcgVNcdy ziu$A=B1SY!J^vntcu)p^rhKV*K8pRd@|l>K%ll#$@el#YgEl1~4q z9>*l;L39L5lX;3IiE7{kW=b2yo=Kva?vNbP4Okl~X5+%YU%$Q=A+C|qEx_pGK)bKy z>BXS$ec;6r#I14cK1LrSHF5fGMjs_T#_2{zr%KO)rjG-%gFKDs6BaK%npUt)9BcU9 zeFzK5(hg4F!|0=>w>dqU@n=e(aJu@0#Yai#OM}z*GyV+e2TqS+{Ad!EM`~k`@eh+m zaQb+bo-Q57>04R;G|9#3(1|2JMLHWaeXO`-Vx3)V;>{c;l^b$nfz9 z_zPT4rGQ&d^i?iOb0ra7#{(h*KaHpF9Ddz~z(*xFx4j#JQX* z0l$#TX%cWtPP2$}IV}Qy3769?;Fg>o5$AGx1^g;5CxZ+zK9(J`(ejb4{-^Tf+ z(~sOPr+{~J{yYJ<&1+;I39ve@X>>442a&;Fg?50k`Bd3An`N#01=u(+BM;0w5%HUYQf#01=u((`0l$UIDHU)_PNjes?=khKO28vrPLqIJa+(F)lG7sKw{tn&0&dCa74Z8wf5w?Z z`^VyU3V7d3rhUi~@Q1h@kAPcp6aly76bpD+i)lY=1>BO;AmD%I<+cjA#UB&!=Q+PF z;1++sfX6t$EBna(lOy17a{dwlx8zp}_=lXoQNS(!W&!{1akGEA1l;295%4d#d}+dw z>+clsZ#aLRfLrnv0q^JhRRV7DhXq{vn_2%B0k`Qot?#S^=--{LKPx@wW>2I?mrC;1<6w;P-HT=Q&3nFPDJ-h4U){ZpkkZ@V|5Z zuz*|qjRL-v^S24O#os01J)FN!z%71>-=DL_>vPVZE#MY^o`4_V{G|eJ@mC3W#xv&p zY7%gZzeT{ua{g`sxA=Pn{B+Krao&-~D@(vH;QSr|x8xTK_;k)+E8rG?gMeSb`CA3t z;*SY<1?SfV+~V&S@D-fjb^ejtn99HRsO} zaEsp~;OjYmrGQ)fwE~_;7rgLk7I2HdRlx7%@_Pi_;?MZ?(E9(0^JfY8vmDPB@RvEB zC*a#St_b*B94`^@PdHvF;8wY{0{#`}ZxC>czbOgck_2x{f_Dk{&%E3o0ngy$q6_#q zj`t_QGbRr0f2;mkN$_j|pUCCs3HWr5D*_(ic!_{phE8u_N@^u0KGspV` z-16J|1>Ew_rAb4_-SWdT1iX~XcM7=Wmu3lgE9Z9!xaF5-3%GUul_TKoTuz>VTmHXC zz%4&k5pe6=s#w4+Kej}`-{9qz3iwAHuN3efI9?^-r~I#}KeYlr@2@5v7Vt@rnRtVM zr#)-pjRJ1j;U)pM_RGxzZrS0OfLrsTOTgde<#r4B(H!p)@C=Uk3ixP_>jFNH<9!0| z=6Jt==W<+{JXCL|aXdr7FX6aTz-MzjOTf!G?h^1N9M2Z;n>d~$;4fPHWdV=#eY!`$ z-{Jgw>Dm(wEPUvj)vz`y5sn}9pG{Fs0r!|^TwKZ)bL0&dM0UBE3n)+gYW z9q1SEzddiZSNhFReg2T&6UY$oytD*~Ry`HKbInir)4ej4xpN&%n5@hSmVI9@B@r5q0ncooMR1iYT(jRJ11 zYfS?FAm?uu@FzIlBH%A`yj8$o=Xjfdf5!2cfcJB}OTcBWKivZUD~|UF_=Ozr6>w`k z)dk#IH~R$KS~vRz{8BDo${VWZ*Ks^Uz*lhGDc}tp&l2zlIPMbgzj8cVz@OuIj)2EF zo+se1bKE1~?{Zub@J~5jEZ~PYULxS5`FtrA@N+m`Dd0YiR|$AA$7=zlVgWyk`>Q2M@JazchRdlE@MAe%E8wF!9v1NL>BR|r z8U_3~&fg^9Cvv=5z)#|Mi-4cP@iqZJjpH!^AJ6eF0sj@py9Im#$9o0*9FFS(p2P7z z0ng=lzkpBVc*cc8_3bwtcMA9vj%Nw@RF1m@{9=yh2zUX<^8|b*$2|hBa9k1aSsX7B z@XI(}D&Vs@UMb*nI9?^-^Ee(B@T)oAAm9r)-YDRu9B&fvGLE+h`1Krb74RE4-X`G7 zI35%5YL0gc_zI5q2>2?F_X_wLj_U%xj^q6TUe9r9%22&hIi4ZlcXHe*;CFM}CE!gQ z&ld29IG!Wmk8nIs!2iN=MZllrc(H&#!|@UUe~#m&0{$Y$s|38ArKv;pKJ z?C6u_rd!2gHyw+VO-=Z^_^J?HNdaEZ6KTfjYY%>L{V@L0Q9pI!m4 z;{3XROPs$?!0+Sr=@)Qmn<-zKHdN1BIe&(Lmu@!sodUjv^JfWocbm!Y67UZ=f3|>! zJ52r@0q^7dc>?a?@;w4RVz$|zih##nFy$8uxSR8r2zc>7P5x2=pU(L!1-$ANlfO#9 z=W_m90WanC2@CjA&fg&5#jDJFN{s@3JLhi_@ZwEoeVPTlh4Z%vcom;ttpeW2^{q|7 zV;fBQEd@jM$D*aep?Ko`76DJ^@5ML;yobxp67U$uJp$fKF972cyVxw3ely1UZ5_h9 zZ1{x)@K3i5r{7kwK0P*ksRiP@*M`$?(O4hry;>@rexJtrWO>Z`(C-16BWR|$Y`EEz zCZ27>`Ob?a%8Q*C&L4R_garwu>NhG*IE(`~rRhM!@>vu(KBhUeJu z@isiqhX2Zjdu;fbHe9jc**3h`hEK5JB{uvl8(wO|&$i)}Hk^KA!1`3#@N+E?-?cXU zJR2Ui;pf}%1{ergWj4IlhSPh))+cPke`|sGZm{9>TQAn9(T2~qKzujZ@HsZT*@n-x z;Vm}&3LD;P!{^!XHXB}I!(%r5N*mr~!>_X8-8TGc8{T8Xud(61HhjJf*KIicmYDVF zv*8OY5a0baywrwE+|ME(VWADru;JI)aHkC~v*B4be31=z+3<23o^8V`Y`G+XMgYf&c${ zK#AG z8AO*d`T?RTNT8}kfbrK6O(9*Qm(f=dO`%+)o6(mOO(9$(#^_6krqHd?%IN7tQ^?k6X7q(b zQ>fNxWb_3@Q;60GGx{u|DKu+TG5U0(DI{x@GWtZKDHLlIGx}JfDFkbH7(Ie$3cVUR zj7}k%Lav63(T6?;O`%r9$>?v1rVy(kG5RZ_DYRrOL$r(NUPgaFG=)-)Zbt7S znnI{XjM1+WeFo93jNVK%g-nfRMsFl~JkgDeewJtoks4t}KSA`FL{~BTQKGYnE@kus zL{A{Pn9;u{nnIw4htanaO`%UChtanZO(9Ri#ps)erckHhWOOyr6yh`_M&Cd*g*J`8 z!)*MCrjVx5%jm0!rckEQ&FIUCrVyqPWAr6NQ|QuYW%P8SDP(ChGx|cJDO71RGWr6d zDMV?68GRPf6q+=u7=1d?6p}Pb8GRzr6pA#88GS6#baZ5R7(Ie$3P~C{j7}k%LXn1x z(T6?)O(96b$>?v1rqH7yG5RZ_DdcGM{lvzfXb;i7jQ)UV3NaepjNU~wg%*t%qhBSu zfaq36Zzh^TiAFP{Hxf-DM5B?>&k{X@=rE(7AbKXzRg8X=XocufMn6EbpXg#n|DNbe zi1sl0cA_a%Xyh>ZR-!3HXt)@C6VVhJG@OjCCYnNmhQ#O_h^A1W(RYZAKhYEdGGrAdlInfmIGh&RsglG!&8Lf<-PBex1jAlk(NHm4^j7COZKs1H)j4-3mBAP;Z zMirw^Cz?WdMk%9DB$`5ZMlqw0C7MEZhKJE3h^A1Tk;CW|qA5gYxEOutL(mkOGn|b6 zmS_se84{zvBAP;RM&FNY{E03lx|h)(5KW;sqnpvYh^CO65o7eLM3)iW%IM8RQ;5xI zX7om)DYRxZGWuDfDWqnE8T|y&6iPFy82u>Gv;Y~UjDCRV#Y7h~`u9ZNK(vR^w-bFM z(K(F1m1qi)87@ZOMD$Xkos6y~nnGoU#OND{rVyFY*U!eEXbO!Py^MaKCrzqo1kFD3 zhP3gtxXB~s7t+SlGA55~dj$E6lQuXc{alFbl*qbk7N35?5wP?lVBes)L|!UP9;tt1 z$INo|9Y?^PKLYm1zhiA*p{85RzZLSSn5DU2`_(tERn$F7U6O&RUC3