A question about parse a dns package

[BearGrass]

Hi
I have learnd your beautiful code for parsing DNS package. And I have a question in 127 line of dns_parse.c. Why you judge the value of c ? In my opinion，if "c" is a normal charactor ,i will put it in name. But , if not,i will drop the pacage ,becase it is a illegal package. THX ,waiting for your answer.

[pflarr]

I think you mean line 127 of strutils.c. If a name contains a non-printable/illegal character, then yes, that is an invalid DNS packet. Should we still record it though? Absolutely! Dns_parse is for network monitoring, and if we have strange, illegal dns packets flowing around we want to know about them.

…

On Thu, Jan 19, 2017 at 6:20 AM, BearGrass ***@***.***> wrote: Hi I have learnd your beautiful code for parsing DNS package. And I have a question in 127 line of dns_parse.c. Why you judge the value of c ? In my opinion，if "c" is a normal charactor ,i will put it in name. But , if not,i will drop the pacage ,becase it is a illegal package. THX ,holp for answer. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#12>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AADFpUZhKsK9OYaNsfrkh13IUj7Xkjnoks5rT2MwgaJpZM4LoGgA> .

-- Paul Ferrell pflarr@gmail.com

[BearGrass]

Understand ！ thank you very much

[canaaniteL]

Hi
I find the ftp address "ftp://ftp.lanl.gov/public/pflarr/" is no longer available to access those pcap data samples,could you give me the method to get those files? Thank you very much!~