Xentrk
Part of the Furniture
x3mRouting Option 4 - autoscan.sh Script Update
To update, select option [5] Check for updates to existing x3mRouting installation from the x3mMenu.
I recently did some analysis for HBOMAX and made some updates to the autoscan.sh script to provide additional information to display the FQDN for the query records along with the FQDN for the reply records whose IPv4 addresses where added to the IPSET list. Please note the updated usage instructions.
When I perform this type of analysis, I configure the router to route ALL TRAFFIC to the interface I intend to selectively route the streaming media traffic. I then go to the website or application and select the options to generate traffic so records are logged in dnsmasq.log.
autoscan.sh can be used to search for terms in dnsmasq.log. You can specify one or more search term by separating the search terms with a comma.
The autoscan.sh script will list the domain name query records for a website or streaming service found in dnsmasq.log. autoscan.sh will return a summary of the top level domain names in IPSET dnsmasq format followed by a list of the query records in Fully Qualified Domain Names (FQDN) format. Similarly, the script can also be used to display the dnsmasq reply records in FQDN format for those IPv4 addresses that were added to the IPSET list.
autoscan.sh Usage Notes
Display query records
Display Fully Qualified Domain Name(FQDN) added to IPSET list
autoscan.sh Usage Examples
Scan dnsmasq log for query records that contain "hbo".
Display the domain name reply records whose IPv4 addresses were added to the IPSET list specified
To update, select option [5] Check for updates to existing x3mRouting installation from the x3mMenu.
I recently did some analysis for HBOMAX and made some updates to the autoscan.sh script to provide additional information to display the FQDN for the query records along with the FQDN for the reply records whose IPv4 addresses where added to the IPSET list. Please note the updated usage instructions.
When I perform this type of analysis, I configure the router to route ALL TRAFFIC to the interface I intend to selectively route the streaming media traffic. I then go to the website or application and select the options to generate traffic so records are logged in dnsmasq.log.
autoscan.sh can be used to search for terms in dnsmasq.log. You can specify one or more search term by separating the search terms with a comma.
The autoscan.sh script will list the domain name query records for a website or streaming service found in dnsmasq.log. autoscan.sh will return a summary of the top level domain names in IPSET dnsmasq format followed by a list of the query records in Fully Qualified Domain Names (FQDN) format. Similarly, the script can also be used to display the dnsmasq reply records in FQDN format for those IPv4 addresses that were added to the IPSET list.
autoscan.sh Usage Notes
Display query records
Code:
sh autoscan.sh scan=disney
sh autoscan.sh scan=netflix,nflx
sh autoscan.sh scan=hbo,hbomaxDisplay Fully Qualified Domain Name(FQDN) added to IPSET list
Code:
sh autoscan.sh ipset_name=HBOMAX
sh autoscan.sh ipset_name=NETFLIX,HBOMAXautoscan.sh Usage Examples
Scan dnsmasq log for query records that contain "hbo".
Code:
sh autoscan.sh scan=hbo
IPSET Format
-------------------------------------
hbo.com
hbomax.com
warnermediacdn.com
FQDN Format
-------------------------------------
artist.api.cdn.hbo.com
comet.api.hbo.com
commerce.api.hbo.com
dash.pro42.akm.cdn.hbomax.com
dash.pro42.cf.cdn.hbomax.com
hbomax-images.warnermediacdn.com
hbomax.com
markers.api.hbo.com
media.fly.cdn.hbomax.com
telegraph.api.hbo.com
www.hbomax.comDisplay the domain name reply records whose IPv4 addresses were added to the IPSET list specified
Code:
sh autoscan.sh ipset_name=HBOMAX
FQDN added to HBOMAX
-------------------------------------
a1806.dscr.akamai.net
a1915.dscf1.akamai.net
a1928.dscw143.akamai.net
a1928.dscw143.akamai.net.0.1.cn.akamaitech.net
a1944.dscw16.akamai.net
a1952.dscf1.akamai.net
a1992.dscr.akamai.net
clips-media-ctl.warnermediacdn.com.c.footprint.net
d2axx2wgfxkml4.cloudfront.net
dash.pro42.lv3.cdn.hbomax.com.c.footprint.net
dualstack.hbo.map.fastly.net
dualstack.hbo2.map.fastly.net
e12596.dscj.akamaiedge.net
e34379.a.akamaiedge.net
markers.api.hbo.com
telegraph.api.hbo.com
