DNS Plugin tries to resolve addresses as hostname on Moto Edge 30 Pro Android 12

[fraichu]

powertunnel_moto.log.txt
DNS Resolver seems to get IP Address instead of hostname as input.

02-04 21:55:19.333 17422 17422 W io.github.krlvm.powertunnel.android: type=1400 audit(0.0:26426): avc: granted { execute } for comm=50726F787920426F6F747374726170 path="/data/data/io.github.krlvm.powertunnel.android/files/plugins/oat/arm64/DNSResolver-Android.odex" dev="dm-12" ino=78671 scontext=u:r:untrusted_app:s0:c115,c257,c512,c768 tcontext=u:object_r:app_data_file:s0:c115,c257,c512,c768 tclass=file app=io.github.krlvm.powertunnel.android
02-04 21:55:19.343 17422 18866 I i*.g*.k*.p*.PowerTunnel: Registered plugin 'DNS' [dns] v1.0.2 (3) by krlvm
02-04 21:55:19.346 17422 18866 I DNSPlugin: DNS Resolver: 'https://1.1.1.1/dns-query' [dnsOverHttps=true, dnsSec=false, ignoreHosts=false]
02-04 21:55:20.203 17422 18903 E LDNSResolver: Resolution of hostname '157.240.239.61' failed
02-04 21:55:23.856 17422 18959 E LDNSResolver: Resolution of hostname '36.4.104.0' failed
02-04 21:55:26.679 17422 18979 E LDNSResolver: Resolution of hostname '36.4.104.0' failed
02-04 21:55:27.721 17422 19147 E LDNSResolver: Resolution of hostname '185.151.204.9' failed
02-04 21:55:28.453 17422 19231 E LDNSResolver: Resolution of hostname '36.4.104.0' failed
02-04 21:55:28.582 17422 19232 E LDNSResolver: Resolution of hostname '142.250.194.42' failed
02-04 21:55:31.423 17422 18903 E LDNSResolver: Resolution of hostname '35.82.174.126' failed

[krlvm]

Looks like the VPN interceptor fails to extract SNI, so the proxy server sees the IP as the host name

[krlvm]

Hostname is being extracted here and is being saved to packet info here if extraction was successful (i.e. len > 0)