mirror of
https://github.com/wader/fq.git
synced 2024-12-23 05:13:30 +03:00
8e0dde03d0
This will allow passing both cli options and format options to sub decoder. Ex: pass keylog option to a tls decoder when decoding a pcap. Ex: pass decode options to a format inside a http body inside a pcap. Add ArgAs method to lookup argument based on type. This also makes the format decode function have same signature as sub decoders in the decode API. This change decode.Format a bit: DecodeFn is now just func(d *D) any DecodeInArg renamed to DefaultInArg
25 lines
487 B
Go
25 lines
487 B
Go
package dns
|
|
|
|
import (
|
|
"github.com/wader/fq/format"
|
|
"github.com/wader/fq/pkg/decode"
|
|
"github.com/wader/fq/pkg/interp"
|
|
)
|
|
|
|
func init() {
|
|
interp.RegisterFormat(decode.Format{
|
|
Name: format.DNS_TCP,
|
|
Description: "DNS packet (TCP)",
|
|
Groups: []string{format.TCP_STREAM},
|
|
DecodeFn: dnsTCPDecode,
|
|
})
|
|
}
|
|
|
|
func dnsTCPDecode(d *decode.D) any {
|
|
var tsi format.TCPStreamIn
|
|
if d.ArgAs(&tsi) {
|
|
tsi.MustIsPort(d.Fatalf, format.TCPPortDomain)
|
|
}
|
|
return dnsDecode(d, true)
|
|
}
|