Ignore DNS request connection from kernel

This commit is contained in:
Daniel 2023-08-19 13:59:44 +02:00
parent de61241847
commit cc752f8e18

View file

@ -54,8 +54,9 @@ func getDNSRequestConnectionKey(packetInfo *packet.Info) (id string, ok bool) {
// SaveDNSRequestConnection saves a dns request connection for later retrieval.
func SaveDNSRequestConnection(conn *Connection, pkt packet.Packet) {
// Check connection.
if conn.PID == process.UndefinedProcessID {
log.Tracer(pkt.Ctx()).Tracef("network: not saving dns request connection because the PID is undefined")
if conn.PID == process.UndefinedProcessID || conn.PID == process.SystemProcessID {
// When re-injecting packets on Windows, they are reported with kernel PID (4).
log.Tracer(pkt.Ctx()).Tracef("network: not saving dns request connection because the PID is undefined/kernel")
return
}