Hacker GitHub

← All repos

m3047/shodohflo

View on GitHub ↗ ★ 18 Python

Pure Python netflow (1K PPS!) and DNS correlation, with reusable Frame Streams, DnsTap and Protobuf implementations

6 mentions on Hacker News by 1 person: 0 stories, 6 comments · first 2020-05-19 · latest 2025-05-30

Mentions per year 6 mentions · busiest year 2020 (2)
20082026
  1. …I re-used the protobuffer dissector for the Dnstap half of the ShoDoHFlo DNS + netflow correlator ( https://github.com/m3047/shodohflo ). I started down that road because Vixie got his panties twisted up and his hair on fire about DoH, and…
  2. …+ dnspython + dpkt, DNS as both observable and transport. The core components are on GitHub: * https://github.com/m3047/shodohflo * https://github.com/m3047/rear_view_rpz * https://github.com/m3047/rkvdns Not the first time I've referenced…
  3. …the dissector for my Dnstap fu, which has since been refactored to a simple composable agent ( https://github.com/m3047/shodohflo/tree/master/agents ) based on what was originally a demo program ( https://github.com/m3047/shodohflo/blob/mas…
    comment by m3047 · 2024-05-17 · in Demystifying the protobuf wire format
  4. …By the way you can't use it for disk I/O, but you can try to use it for e.g. STDOUT: https://github.com/m3047/shodohflo/blob/5a04f1df265d84e69f10... class UniversalWriter(object): """Plastering over the differences between file descriptors…
    comment by m3047 · 2022-11-10 · in Python Asyncio
  5. …not enough opportunity to apply that learning in any practical sense. But I could be wrong. ( https://github.com/m3047/shodohflo )
    comment by m3047 · 2020-06-22 · in What happens when you update your DNS
  6. …for DNS is generally poorly done. When Vixie's hair was on fire about DoH last summer I wrote this: https://github.com/m3047/shodohflo/ Look in app/ for a screenshot. Needs access to a recursive resolver compiled with support for Dnstap.…