search

mmirabent / sniffle

TCP handshake sniffer
Apache License 2.0
1 stars 0 forks source link

reverse dns flag #22

Open mmirabent opened 8 years ago

mmirabent commented 8 years ago

Make the command line flag actually do something. In this case, replace the IP addresses in the output with DNS names.

mmirabent commented 8 years ago

I'm still concerned about making two dns queries for every tcp handshake. Possibly put unbound between sniffle and authoritative DNS? More info here. It should be pretty straightforward to make a local only caching DNS server, bind it to localhost and query that instead of the ISP.