manual inspection of individual mismatches
Right now reports include only domain name and query type, like this:
== Field "rcode" mismatch ('NOERROR', 'SERVFAIL') query details
NS2.SPYROCOIN.BID. A 2 mismatches
This is kind of misleading because query flags like DO
, CD
, AD
, EDNS options etc. affect query processing. In other words, it might not be enough to copy&paste domain name and type to dig command line dig NS2.SPYROCOIN.BID. A
to reproduce the issue.
We need a way to uniquely identify particular issue and allow extraction and display of captured DNS messages.
-
Extract binary blobs with DNS messages into separate files for inspection in hexeditor -
Display text representation of individual messages -
Store text representation in a way suitable for existing diff tools -
Result of msgdiff
algorithm should be available to user (possibly re-computed to diff all possible fields instead of subset configured inrespdiff.cfg
)