@@ -71,6 +71,12 @@ static struct packet pkt_http_request =
7171 sizeof (http_request ),
7272 "ipv4_tcp_http_req"
7373};
74+ static struct packet pkt_dns_request =
75+ {
76+ dns_request ,
77+ sizeof (dns_request ),
78+ "ipv4_udp_dns_req"
79+ };
7480static struct packet pkt_ipv6_tcp_syn =
7581{
7682 ipv6_tcp_syn ,
@@ -110,6 +116,17 @@ static struct test tests[] =
110116 {"tcp.PayloadLength <= 469" , & pkt_http_request , TRUE},
111117 {"tcp.PayloadLength > 469" , & pkt_http_request , FALSE},
112118 {"tcp.PayloadLength < 469" , & pkt_http_request , FALSE},
119+ {"udp" , & pkt_dns_request , TRUE},
120+ {"udp && udp.SrcPort > 1 && ipv6" , & pkt_dns_request , FALSE},
121+ {"udp.DstPort == 53" , & pkt_dns_request , TRUE},
122+ {"udp.DstPort > 100" , & pkt_dns_request , FALSE},
123+ {"ip.DstAddr = 8.8.4.4" , & pkt_dns_request , TRUE},
124+ {"ip.DstAddr = 8.8.8.8" , & pkt_dns_request , FALSE},
125+ {"ip.SrcAddr >= 10.0.0.0 && ip.SrcAddr <= 10.255.255.255" ,
126+ & pkt_dns_request , TRUE},
127+ {"ip.SrcAddr < 10.0.0.0 or ip.SrcAddr > 10.255.255.255" ,
128+ & pkt_dns_request , FALSE},
129+ {"udp.PayloadLength == 29" , & pkt_dns_request , TRUE},
113130 {"ipv6" , & pkt_ipv6_tcp_syn , TRUE},
114131 {"ip" , & pkt_ipv6_tcp_syn , FALSE},
115132 {"tcp.Syn" , & pkt_ipv6_tcp_syn , TRUE},
0 commit comments