From 69896692e0d15f85ba9984a6af29bae7cdd1fa0b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=A1=D0=B5=D1=80=D0=B3=D0=B5=D0=B9=20=D0=9C=D0=B0=D1=80?=
 =?UTF-8?q?=D0=B8=D0=BD=D0=BA=D0=B5=D0=B2=D0=B8=D1=87?=
 <sergey.marinkevich@eltex.loc>
Date: Thu, 9 Apr 2026 16:58:42 +0700
Subject: [PATCH] fup

---
 dns_domains_from_dump.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/dns_domains_from_dump.py b/dns_domains_from_dump.py
index 257e972..4338c3e 100755
--- a/dns_domains_from_dump.py
+++ b/dns_domains_from_dump.py
@@ -19,6 +19,7 @@ _QUERY = re.compile(
     (?<!\d)                           # не середина числа
     (\d+)\+                           # txid и флаг запроса
     \s+
+    (?:\[[^\]]+\]\s+)*               # опц. блоки tcpdump: [1au], [bad udp cksum ...], ...
     (\S+?)                           # тип (A, AAAA, PTR, …)
     \?
     \s+