remove noise in summary

Author: fallard84

action/dist/post.js

@@ -20050,7 +20050,7 @@ function filterDNSNoise(connections) {
   const result = [];
   for (const [, conns] of byDomain) {
     const hasActualConnection = conns.some(
-      (c) => !["DNS", "DNS-response"].includes(c.protocol) && c.reason === "ip-allowed"
+      (c) => !["DNS"].includes(c.protocol) && c.reason === "ip-allowed"
     );
     if (hasActualConnection) {
       const filtered = conns.filter(

action/dist/post.js.map

@@ -288,9 +288,7 @@ function filterDNSNoise(connections: Connection[]): Connection[] {
   for (const [, conns] of byDomain) {
     // Check if there are any non-DNS connections with reason "ip-allowed"
     const hasActualConnection = conns.some(
-      (c) =>
-        !["DNS", "DNS-response"].includes(c.protocol) &&
-        c.reason === "ip-allowed",
+      (c) => !["DNS"].includes(c.protocol) && c.reason === "ip-allowed",
     );
 
     if (hasActualConnection) {

action/src/post.ts

@@ -507,52 +507,52 @@ func (a *Agent) processDNSTypeAResponse(domain string, answer *layers.DNSResourc
 			// Add to in-memory allowed IPs map
 			// No need to update nftables - Go agent handles all decisions
 			a.allowedIps[ip] = true
-			a.addConnectionLog(ConnectionLog{
-				Decision:       "allowed",
-				Protocol:       "DNS-response",
-				SrcIP:          pkt.SrcIP,
-				SrcPort:        pkt.SrcPort,
-				DstIP:          ip,
-				DstPort:        "53",
-				Domain:         domain,
-				Reason:         "dns-resolved",
-				PID:            pkt.PID,
-				ProcessName:    pkt.ProcessName,
-				CommandLine:    pkt.CommandLine,
-				ExecutablePath: pkt.ExecutablePath,
-			})
+			// a.addConnectionLog(ConnectionLog{
+			// 	Decision:       "allowed",
+			// 	Protocol:       "DNS-response",
+			// 	SrcIP:          pkt.SrcIP,
+			// 	SrcPort:        pkt.SrcPort,
+			// 	DstIP:          ip,
+			// 	DstPort:        "53",
+			// 	Domain:         domain,
+			// 	Reason:         "dns-resolved",
+			// 	PID:            pkt.PID,
+			// 	ProcessName:    pkt.ProcessName,
+			// 	CommandLine:    pkt.CommandLine,
+			// 	ExecutablePath: pkt.ExecutablePath,
+			// })
 		}
 	} else if a.isIpAllowed(ip) {
 		fmt.Println("-> Allowed request")
-		a.addConnectionLog(ConnectionLog{
-			Decision:       "allowed",
-			Protocol:       "DNS-response",
-			SrcIP:          pkt.SrcIP,
-			SrcPort:        pkt.SrcPort,
-			DstIP:          ip,
-			DstPort:        "53",
-			Domain:         domain,
-			Reason:         "ip-allowed",
-			PID:            pkt.PID,
-			ProcessName:    pkt.ProcessName,
-			CommandLine:    pkt.CommandLine,
-			ExecutablePath: pkt.ExecutablePath,
-		})
+		// a.addConnectionLog(ConnectionLog{
+		// 	Decision:       "allowed",
+		// 	Protocol:       "DNS-response",
+		// 	SrcIP:          pkt.SrcIP,
+		// 	SrcPort:        pkt.SrcPort,
+		// 	DstIP:          ip,
+		// 	DstPort:        "53",
+		// 	Domain:         domain,
+		// 	Reason:         "ip-allowed",
+		// 	PID:            pkt.PID,
+		// 	ProcessName:    pkt.ProcessName,
+		// 	CommandLine:    pkt.CommandLine,
+		// 	ExecutablePath: pkt.ExecutablePath,
+		// })
 	} else {
-		a.addConnectionLog(ConnectionLog{
-			Decision:       "blocked",
-			Protocol:       "DNS-response",
-			SrcIP:          pkt.SrcIP,
-			SrcPort:        pkt.SrcPort,
-			DstIP:          ip,
-			DstPort:        "53",
-			Domain:         domain,
-			Reason:         "domain-not-allowed",
-			PID:            pkt.PID,
-			ProcessName:    pkt.ProcessName,
-			CommandLine:    pkt.CommandLine,
-			ExecutablePath: pkt.ExecutablePath,
-		})
+		// a.addConnectionLog(ConnectionLog{
+		// 	Decision:       "blocked",
+		// 	Protocol:       "DNS-response",
+		// 	SrcIP:          pkt.SrcIP,
+		// 	SrcPort:        pkt.SrcPort,
+		// 	DstIP:          ip,
+		// 	DstPort:        "53",
+		// 	Domain:         domain,
+		// 	Reason:         "domain-not-allowed",
+		// 	PID:            pkt.PID,
+		// 	ProcessName:    pkt.ProcessName,
+		// 	CommandLine:    pkt.CommandLine,
+		// 	ExecutablePath: pkt.ExecutablePath,
+		// })
 		if blocking {
 			fmt.Println("-> Blocked request")
 		} else {

agent/agent.go

@@ -1 +1 @@
-0fb94434598724968f610f15fe4457a081ea1875d343cfcae48ec1004326f398  agent
+8779de29392565a926da97e9aa065bf5e4bf2a4041dde8d298aed2f4388f2238  agent