udp tracing support

Hi, I am thinking if there is any way to trace udp traffic generated by process (similar like tcplife). I understand that there might be issue due to the fact that UDP ports gets released quickly as soon the request finishes. I am new to bcc so would like to know what challenges are there or how feasible is it to try to implement it. My initial use case is that i would like to track process who are making to excessive calls to my DNS servers.

The issue names BCC, UDP traffic, DNS calls, and tcplife, but no source file or test. Start by reviewing tcplife and the existing BCC tracing entry points to assess how process-level UDP traffic could be observed. Done requires an agreed scope and a demonstrated approach for identifying excessive DNS callers.

Written by the indexing model from the issue text.