Method __init__

dshell/plugins/dns/dnscc.py:16–33

(self, *args, **kwargs)

class DshellPlugin(dnsplugin.DNSPlugin):

    def __init__(self, *args, **kwargs):
        super().__init__(
            name="DNS Country Code",
            description="identify country code of DNS A/AAAA record responses",
            bpf="port 53",
            author="bg",
            output=AlertOutput(label=__name__),
            optiondict={
                'foreign': {
                    'action': 'store_true',
                    'help': 'report responses in non-US countries'
                },
                'code': {
                    'type': str,
                    'help': 'filter on a specific country code (ex. US, DE, JP, etc.)'
                }
            }
        )

    def dns_handler(self, conn, requests, responses):
        "pull out the A/AAAA queries from the last DNS request in a connection"