Crate packet_dissector_mdns 

mDNS (Multicast DNS) dissector.

mDNS reuses the DNS message format (RFC 1035) but operates over UDP port 5353 and redefines two bits that DNS would otherwise treat as part of the 16-bit CLASS field:

• Top bit of qclass in the Question Section — the unicast-response bit (“QU” bit); see RFC 6762, Section 18.12 and Section 5.4.
• Top bit of rrclass in the Resource Record Sections — the cache-flush bit; see RFC 6762, Section 18.13 and Section 10.2.

Per RFC 6762, Section 10.2 the cache-flush reuse does not apply to pseudo-RRs (e.g., OPT), whose rrclass field continues to encode the EDNS0 UDP payload size as a full 16-bit value.

References

• RFC 6762 (mDNS): https://www.rfc-editor.org/rfc/rfc6762
• RFC 1035 (DNS message format): https://www.rfc-editor.org/rfc/rfc1035
• RFC 6891 (EDNS0 / OPT pseudo-RR): https://www.rfc-editor.org/rfc/rfc6891

Structs

MdnsDissector

mDNS dissector.