Detecting additional information from the probes
Ahoi everyone, I am currently trying to asses the behaviour of DNS queries between clients and authentication servers - and I would love to trace some DNS pakets between the probes and my server. I was wondering, if there is some way to get the information about the Authentication Bit of DNSSEC specified in the DNS query headers. A.f.a.i.k., the probes do something similiar/do a /dig/ lookup. /dig/ does provide information about the DNSSEC-section - and furthermore it has a very handy /+trace/ option. Can anyone maybe tell me, if there are possibilities to access the AUTH bith or even something like a trace function via the probes? Or should I open a feature request for that? Help much appreciated! :-) Best regards, Chris
On Fri, Feb 12, 2016 at 04:20:51PM +0900, Christoph Rauterberg <c.rauterberg@stud.uni-goettingen.de> wrote a message of 60 lines which said:
I was wondering, if there is some way to get the information about the Authentication Bit of DNSSEC specified in the DNS query headers.
You mean the reply?
A.f.a.i.k., the probes do something similiar/do a /dig/ lookup.
No. The probes have a DNS client. dig is a DNS client. That's all the similarity.
Can anyone maybe tell me, if there are possibilities to access the AUTH bith
It is accessible (the full response is in the "abuf" field, you just have to decode it, example in Python: answer = result['abuf'] + "==" content = base64.b64decode(answer) msg = dns.message.from_wire(content) if msg.flags & dns.flags.AD: print "Authentic"
On Fri, Feb 12, 2016 at 10:06:21AM +0100, Stephane Bortzmeyer <bortzmeyer@nic.fr> wrote a message of 25 lines which said:
It is accessible (the full response is in the "abuf" field, you just have to decode it, example in Python:
I forgot to add that it requires setting the DO bit in the query <https://atlas.ripe.net/docs/measurement-creation-api/>. In Python: data["definitions"][0]["do"] = True
Coolio, I was overreading the DO-Bit. Together with the Sagan-Interface for Python, I can now get to work, Thanks for the quick reply! :-) On 12.02.2016 18:19, Stephane Bortzmeyer wrote:
On Fri, Feb 12, 2016 at 10:06:21AM +0100, Stephane Bortzmeyer <bortzmeyer@nic.fr> wrote a message of 25 lines which said:
It is accessible (the full response is in the "abuf" field, you just have to decode it, example in Python: I forgot to add that it requires setting the DO bit in the query <https://atlas.ripe.net/docs/measurement-creation-api/>. In Python:
data["definitions"][0]["do"] = True
participants (2)
-
Christoph Rauterberg -
Stephane Bortzmeyer