Use BPF filter when parsing PCAP file

chazlever · Jul 11, 2020 · ec1cd18 · ec1cd18
1 parent f384c25
commit ec1cd18
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/parser/parse.go b/parser/parse.go
@@ -43,6 +43,16 @@ func ParseFile(fname string) {
 	}
 	defer handle.Close()
 
+	// Setup BPF filter on handle
+	bpfFilter := "udp port 53"
+	if DoParseTcp {
+		bpfFilter = "port 53"
+	}
+	err = handle.SetBPFFilter(bpfFilter)
+	if err != nil {
+		log.Warnf("Could not set BPF filter: %v\n", err)
+	}
+
 	ParseDns(handle)
 }