ref: 74185653ad7928a482a46eb125f2a630c5049d5a dir: /readme.txt/
read a pcap and see if it's dns; then print ip if it's A, ipv6 if it's AAAA, domain name if it's CNAME, mock user otherwise. run test.sh to test.