DNS: drop support of DNS over TCP (#1908)

DNS over TCP support dropped until fully implemented.
aquasecurity · Jul 3, 2022 · 549e411 · 549e411
1 parent 086afec
commit 549e411
Showing 1 changed file with 10 additions and 4 deletions.
diff --git a/pkg/ebpf/c/tracee.bpf.c b/pkg/ebpf/c/tracee.bpf.c
@@ -5518,10 +5518,16 @@ static __always_inline void set_net_event_id(net_packet_t *pkt)
         DNS = 53,
     };
 
-    if (pkt->dst_port == DNS)
-        pkt->event_id = DNS_REQUEST;
-    if (pkt->src_port == DNS)
-        pkt->event_id = DNS_RESPONSE;
+    switch (pkt->protocol) {
+        case IPPROTO_UDP:
+            if (pkt->dst_port == DNS)
+                pkt->event_id = DNS_REQUEST;
+            if (pkt->src_port == DNS)
+                pkt->event_id = DNS_RESPONSE;
+            break;
+        default:
+            pkt->event_id = NET_PACKET;
+    }
 }
 
 // some network events might need payload (even without capture)