Closed lianke123321 closed 8 years ago
We should try matching the query part of the response with the actual query domain name. To clean up the data that we already have, we can use the pcaps to match the query section.
False positive is still happening. Reopen the issue.
Confirm fixed by #246
DNS primitive has a serious bug that could cause reply for another domain name being accepted by the wrong thread.