Skip to content

dst_dns arg for the net_tcp_connect event is empty #4675

Open
@ryan-jan

Description

@ryan-jan

Description

The dst_dns arg for the net_tcp_connect event is empty.

The event is logged successfully but the dst_dns is empty.

The following is an excerpt from the relevant net_packet_dns and net_tcp_connect events.

{"eventName":"net_packet_dns","args":[{"name":"src","type":"const char*","value":"192.168.65.7"},{"name":"dst","type":"const char*","value":"172.17.0.3"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":42923},{"name":"metadata","type":"trace.PacketMetadata","value":{"direction":1}},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":7907,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":3,"NSCount":0,"ARCount":0,"questions":[{"name":"www.terraform.io","type":"A","class":"IN"}],"answers":[{"name":"www.terraform.io","type":"CNAME","class":"IN","TTL":377,"IP":"","NS":"","CNAME":"cname.vercel-dns.com","PTR":"","TXTs":[],"SOA":{"MName":"","RName":"","serial":0,"refresh":0,"retry":0,"expire":0,"minimum":0},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""},{"name":"cname.vercel-dns.com","type":"A","class":"IN","TTL":2019,"IP":"66.33.60.194","NS":"","CNAME":"","PTR":"","TXTs":[],"SOA":{"MName":"","RName":"","serial":0,"refresh":0,"retry":0,"expire":0,"minimum":0},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""},{"name":"cname.vercel-dns.com","type":"A","class":"IN","TTL":2019,"IP":"76.76.21.142","NS":"","CNAME":"","PTR":"","TXTs":[],"SOA":{"MName":"","RName":"","serial":0,"refresh":0,"retry":0,"expire":0,"minimum":0},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"authorities":[],"additionals":[]}}]}

{"eventName":"net_tcp_connect","args":[{"name":"dst","type":"const char*","value":"66.33.60.194"},{"name":"dst_port","type":"int","value":443},{"name":"dst_dns","type":"const char **","value":[]}]}

Output of tracee version:

Tracee version: v0.23.0

Output of uname -a:

Linux ad69fbfc6231 6.10.14-linuxkit #1 SMP Fri Nov 29 17:22:03 UTC 2024 aarch64 GNU/Linux

Additional details

N/A

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions