Open cosinekitty opened 3 years ago
The NSEC record format is defined in: https://www.rfc-editor.org/rfc/rfc4034.txt
Example of NSEC with data hex-dumped:
=========================================================================
2021-03-01T18:32:55.0963460Z : packet from 192.168.1.8
0 1 2 3 4 5 6 7 8 9 a b c d e f
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
0000 00 00 84 00 00 00 00 04 00 00 00 03 07 53 48 41 .............SHA
0010 54 4e 45 52 0d 5f 63 61 73 61 74 75 6e 65 73 5f TNER._casatunes_
0020 77 73 04 5f 74 63 70 05 6c 6f 63 61 6c 00 00 10 ws._tcp.local...
0030 80 01 00 00 11 94 00 11 10 6d 61 63 3d 43 43 42 .........mac=CCB
0040 30 44 41 36 34 33 44 39 39 09 5f 73 65 72 76 69 0DA643D99._servi
0050 63 65 73 07 5f 64 6e 73 2d 73 64 04 5f 75 64 70 ces._dns-sd._udp
0060 c0 27 00 0c 00 01 00 00 11 94 00 02 c0 14 c0 14 .'..............
0070 00 0c 00 01 00 00 11 94 00 02 c0 0c c0 0c 00 21 ...............!
0080 80 01 00 00 00 78 00 10 00 00 00 00 22 1b 07 53 .....x......"..S
0090 68 61 74 6e 65 72 c0 27 c0 8e 00 01 80 01 00 00 hatner.'........
00a0 00 78 00 04 c0 a8 01 08 c0 8e 00 2f 80 01 00 00 .x........./....
00b0 00 78 00 05 c0 8e 00 01 40 c0 0c 00 2f 80 01 00 .x......@.../...
00c0 00 11 94 00 09 c0 0c 00 05 00 00 80 00 40 .............@
AnswerRR: name=[SHATNER._casatunes_ws._tcp.local.] type=TXT class=32769 TTL=4500
TXT "mac=CCB0DA643D99"
AnswerRR: name=[_services._dns-sd._udp.local.] type=PTR class=IN TTL=4500
_casatunes_ws._tcp.local.
AnswerRR: name=[_casatunes_ws._tcp.local.] type=PTR class=IN TTL=4500
SHATNER._casatunes_ws._tcp.local.
AnswerRR: name=[SHATNER._casatunes_ws._tcp.local.] type=SRV class=32769 TTL=120
0 0 8731 Shatner.local.
AdditionalRR: name=[Shatner.local.] type=A class=32769 TTL=120
192.168.1.8
AdditionalRR: name=[Shatner.local.] type=NSEC class=32769 TTL=120
RDATA = [c0 8e 00 01 40]
AdditionalRR: name=[SHATNER._casatunes_ws._tcp.local.] type=NSEC class=32769 TTL=4500
RDATA = [c0 0c 00 05 00 00 80 00 40]
I have seen an
NSEC
record for AirPlay speakers. (Denial of existence?) Add support for interpreting and dumping these, instead of printing "not-used":