mirror of
https://github.com/SoftEtherVPN/SoftEtherVPN.git
synced 2025-07-06 07:44:57 +03:00
Added the function to save the DNS query log on the packet logs.
This commit is contained in:
@ -1688,6 +1688,10 @@ PKT *ClonePacket(PKT *p, bool copy_data)
|
||||
ret->L7.IkeHeader = MallocFast(sizeof(IKE_HEADER));
|
||||
Copy(ret->L7.IkeHeader, p->L7.IkeHeader, sizeof(IKE_HEADER));
|
||||
break;
|
||||
|
||||
case L7_DNS:
|
||||
StrCpy(ret->DnsQueryHost, sizeof(ret->DnsQueryHost), p->DnsQueryHost);
|
||||
break;
|
||||
}
|
||||
|
||||
// Address data
|
||||
@ -3010,6 +3014,104 @@ bool ParseTCP(PKT *p, UCHAR *buf, UINT size)
|
||||
return true;
|
||||
}
|
||||
|
||||
// Get the next byte
|
||||
UCHAR GetNextByte(BUF *b)
|
||||
{
|
||||
UCHAR c = 0;
|
||||
// Validate arguments
|
||||
if (b == NULL)
|
||||
{
|
||||
return 0;
|
||||
}
|
||||
|
||||
if (ReadBuf(b, &c, 1) != 1)
|
||||
{
|
||||
return 0;
|
||||
}
|
||||
|
||||
return c;
|
||||
}
|
||||
|
||||
// Interpret the DNS query
|
||||
bool ParseDnsQuery(char *name, UINT name_size, void *data, UINT data_size)
|
||||
{
|
||||
BUF *b;
|
||||
char tmp[257];
|
||||
bool ok = true;
|
||||
USHORT val;
|
||||
// Validate arguments
|
||||
if (name == NULL || data == NULL || data_size == 0)
|
||||
{
|
||||
return false;
|
||||
}
|
||||
StrCpy(name, name_size, "");
|
||||
|
||||
b = NewBuf();
|
||||
WriteBuf(b, data, data_size);
|
||||
SeekBuf(b, 0, 0);
|
||||
|
||||
while (true)
|
||||
{
|
||||
UINT next_len = (UINT)GetNextByte(b);
|
||||
if (next_len > 0)
|
||||
{
|
||||
// Read only the specified length
|
||||
Zero(tmp, sizeof(tmp));
|
||||
if (ReadBuf(b, tmp, next_len) != next_len)
|
||||
{
|
||||
ok = false;
|
||||
break;
|
||||
}
|
||||
// Append
|
||||
if (StrLen(name) != 0)
|
||||
{
|
||||
StrCat(name, name_size, ".");
|
||||
}
|
||||
StrCat(name, name_size, tmp);
|
||||
}
|
||||
else
|
||||
{
|
||||
// Read all
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if (ReadBuf(b, &val, sizeof(val)) != sizeof(val))
|
||||
{
|
||||
ok = false;
|
||||
}
|
||||
else
|
||||
{
|
||||
if (Endian16(val) != 0x01 && Endian16(val) != 0x0c)
|
||||
{
|
||||
ok = false;
|
||||
}
|
||||
}
|
||||
|
||||
if (ReadBuf(b, &val, sizeof(val)) != sizeof(val))
|
||||
{
|
||||
ok = false;
|
||||
}
|
||||
else
|
||||
{
|
||||
if (Endian16(val) != 0x01)
|
||||
{
|
||||
ok = false;
|
||||
}
|
||||
}
|
||||
|
||||
FreeBuf(b);
|
||||
|
||||
if (ok == false || StrLen(name) == 0)
|
||||
{
|
||||
return false;
|
||||
}
|
||||
else
|
||||
{
|
||||
return true;
|
||||
}
|
||||
}
|
||||
|
||||
// UDP parsing
|
||||
bool ParseUDP(PKT *p, UCHAR *buf, UINT size)
|
||||
{
|
||||
@ -3052,6 +3154,13 @@ bool ParseUDP(PKT *p, UCHAR *buf, UINT size)
|
||||
return true;
|
||||
}
|
||||
}
|
||||
|
||||
if (dst_port == 53)
|
||||
{
|
||||
ParseDNS(p, buf, size);
|
||||
return true;
|
||||
}
|
||||
|
||||
|
||||
if (src_port == 500 || dst_port == 500 || src_port == 4500 || dst_port == 4500)
|
||||
{
|
||||
|
@ -705,6 +705,7 @@ struct PKT
|
||||
UCHAR *Payload; // Pointer to the payload of TCP or UDP
|
||||
UINT PayloadSize; // Payload size
|
||||
struct HTTPLOG *HttpLog; // HTTP log
|
||||
char DnsQueryHost[64]; // DNS hostname
|
||||
} GCC_PACKED;
|
||||
|
||||
// Layer-3 packet classification
|
||||
@ -728,6 +729,7 @@ struct PKT
|
||||
#define L7_DHCPV4 1 // DHCPv4 packet
|
||||
#define L7_IKECONN 2 // IKE connection request packet
|
||||
#define L7_OPENVPNCONN 3 // OpenVPN connection request packet
|
||||
#define L7_DNS 4 // DNS packet
|
||||
|
||||
|
||||
// IKE header
|
||||
@ -869,6 +871,7 @@ bool ParseICMPv6(PKT *p, UCHAR *buf, UINT size);
|
||||
bool ParseTCP(PKT *p, UCHAR *buf, UINT size);
|
||||
bool ParseUDP(PKT *p, UCHAR *buf, UINT size);
|
||||
void ParseDHCPv4(PKT *p, UCHAR *buf, UINT size);
|
||||
void ParseDNS(PKT *p, UCHAR *buf, UINT size);
|
||||
PKT *ClonePacket(PKT *p, bool copy_data);
|
||||
void FreeClonePacket(PKT *p);
|
||||
|
||||
@ -901,6 +904,8 @@ void FreeDHCPv4Data(DHCPV4_DATA *d);
|
||||
bool AdjustTcpMssL3(UCHAR *src, UINT src_size, UINT mss);
|
||||
bool AdjustTcpMssL2(UCHAR *src, UINT src_size, UINT mss, USHORT tag_vlan_tpid);
|
||||
UINT GetIpHeaderSize(UCHAR *src, UINT src_size);
|
||||
bool ParseDnsQuery(char *name, UINT name_size, void *data, UINT data_size);
|
||||
UCHAR GetNextByte(BUF *b);
|
||||
|
||||
bool IsDhcpPacketForSpecificMac(UCHAR *data, UINT size, UCHAR *mac_address);
|
||||
|
||||
|
Reference in New Issue
Block a user