majorsylvie / netml-transactions

**adding transaction ID support for ML-Networks course fall 2023**. Feature Extraction and Machine Learning from Network Traffic Traces
Apache License 2.0
0 stars 0 forks source link

Add a DNS record type column #7

Closed majorsylvie closed 10 months ago

majorsylvie commented 10 months ago

this task involves adding a dns_record_qtype column to the dataframe from pcap2pandas().

in scapy, the record type can be recorded as: pkt[DNS].qd.qtype

at the end of this task, the pcap2pandas() on our fork should successfully have the dns_record_qtype column as either None or a string representation of the record question/response type.

additionally, documentation will be made in issue: #8

majorsylvie commented 10 months ago

0e34773414295301f2c803c064e32e1bcf90253f added just the qtype to column. going to test if this works with the netflix data.

majorsylvie commented 10 months ago

it does! i see 1's and 28's and 65's! which are A, AAAA, and HTTPS requests!

Going to make the helper function to convert between number and actual record name string

majorsylvie commented 10 months ago

created helper function in 81592e903e97643c977ef4a8a9920cadd5362843 to parse the number into a strong.

Works successfully on the http.pcap file!

the column dns_record_qtype is nan for any non-DNS records