x3mRouting autoscan.sh Script Update

  • ATTENTION! You'll notice a Prefix dropdown when you create a thread. If your post applies to one of the topics listed, please use that Prefix for your post. When browsing the thread list you can use the Prefix to filter the view.
  • ATTENTION! As of November 1, 2020, you are not able to reply to threads 6 months after the thread is opened if there are more than 500 posts in the thread.
    Threads will not be locked, so posts may still be edited by their authors.
    Just start a new thread on the topic to post if you get an error message when trying to reply to a thread.

Xentrk

Part of the Furniture
x3mRouting Option 4 - autoscan.sh Script Update

To update, select option [5] Check for updates to existing x3mRouting installation from the x3mMenu.

I recently did some analysis for HBOMAX and made some updates to the autoscan.sh script to provide additional information to display the FQDN for the query records along with the FQDN for the reply records whose IPv4 addresses where added to the IPSET list. Please note the updated usage instructions.

When I perform this type of analysis, I configure the router to route ALL TRAFFIC to the interface I intend to selectively route the streaming media traffic. I then go to the website or application and select the options to generate traffic so records are logged in dnsmasq.log.

autoscan.sh can be used to search for terms in dnsmasq.log. You can specify one or more search term by separating the search terms with a comma.

The autoscan.sh script will list the domain name query records for a website or streaming service found in dnsmasq.log. autoscan.sh will return a summary of the top level domain names in IPSET dnsmasq format followed by a list of the query records in Fully Qualified Domain Names (FQDN) format. Similarly, the script can also be used to display the dnsmasq reply records in FQDN format for those IPv4 addresses that were added to the IPSET list.

autoscan.sh Usage Notes

Display query records
Code:
sh autoscan.sh scan=disney
sh autoscan.sh scan=netflix,nflx
sh autoscan.sh scan=hbo,hbomax

Display Fully Qualified Domain Name(FQDN) added to IPSET list
Code:
sh autoscan.sh ipset_name=HBOMAX
sh autoscan.sh ipset_name=NETFLIX,HBOMAX

autoscan.sh Usage Examples

Scan dnsmasq log for query records that contain "hbo".
Code:
sh autoscan.sh scan=hbo

IPSET Format
-------------------------------------
hbo.com
hbomax.com
warnermediacdn.com

FQDN Format
-------------------------------------
artist.api.cdn.hbo.com
comet.api.hbo.com
commerce.api.hbo.com
dash.pro42.akm.cdn.hbomax.com
dash.pro42.cf.cdn.hbomax.com
hbomax-images.warnermediacdn.com
hbomax.com
markers.api.hbo.com
media.fly.cdn.hbomax.com
telegraph.api.hbo.com
www.hbomax.com

Display the domain name reply records whose IPv4 addresses were added to the IPSET list specified

Code:
sh autoscan.sh ipset_name=HBOMAX

FQDN added to HBOMAX
-------------------------------------
a1806.dscr.akamai.net
a1915.dscf1.akamai.net
a1928.dscw143.akamai.net
a1928.dscw143.akamai.net.0.1.cn.akamaitech.net
a1944.dscw16.akamai.net
a1952.dscf1.akamai.net
a1992.dscr.akamai.net
clips-media-ctl.warnermediacdn.com.c.footprint.net
d2axx2wgfxkml4.cloudfront.net
dash.pro42.lv3.cdn.hbomax.com.c.footprint.net
dualstack.hbo.map.fastly.net
dualstack.hbo2.map.fastly.net
e12596.dscj.akamaiedge.net
e34379.a.akamaiedge.net
markers.api.hbo.com
telegraph.api.hbo.com
 
Top