Skip to content

Commit cbc4418

Browse files
committed
Unirec output: change mapping of DNS fields
Old DNS fields (based on CESNET exporter extension) have been replaced by Flowmon DNS fields
1 parent d89f7af commit cbc4418

File tree

1 file changed

+16
-11
lines changed

1 file changed

+16
-11
lines changed

extra_plugins/output/unirec/config/unirec-elements.txt

Lines changed: 16 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -33,17 +33,22 @@ DIR_BIT_FIELD uint8 _internal_dbf_ # Bit field used f
3333
LINK_BIT_FIELD uint64 _internal_lbf_ # Bit field of links on which was flow seen
3434

3535
# --- DNS specific fields ---
36-
DNS_ANSWERS uint16 e8057id0 # DNS answers
37-
DNS_RCODE uint8 e8057id1 # DNS rcode
38-
DNS_NAME string e8057id2 # DNS name
39-
DNS_QTYPE uint16 e8057id3 # DNS qtype
40-
DNS_CLASS uint16 e8057id4 # DNS class
41-
DNS_RR_TTL uint32 e8057id5 # DNS rr ttl
42-
DNS_RLENGTH uint16 e8057id6 # DNS rlenght
43-
DNS_RDATA bytes e8057id7 # DNS rdata
44-
DNS_PSIZE uint16 e8057id8 # DNS payload size
45-
DNS_DO uint8 e8057id9 # DNS DNSSEC OK bit
46-
DNS_ID uint16 e8057id10 # DNS transaction id
36+
DNS_ID uint16 e39499id110 # DNS transaction id
37+
DNS_FLAGS uint16 e39499id111 # DNS header flags
38+
DNS_CNT_QUESTIONS uint16 e39499id112 # DNS questions
39+
DNS_CNT_ANSWERS uint16 e39499id113 # DNS answers
40+
DNS_CNT_AUTHS uint16 e39499id114 # DNS auth. records
41+
DNS_CNT_ADDIT uint16 e39499id115 # DNS additional records
42+
DNS_Q_NAME string e39499id121 # DNS query name
43+
DNS_Q_TYPE uint16 e39499id122 # DNS query type
44+
DNS_Q_CLASS uint16 e39499id123 # DNS query class
45+
DNS_RR_NAME string e39499id116 # DNS RR name
46+
DNS_RR_TYPE uint16 e39499id117 # DNS RR type
47+
DNS_RR_CLASS uint16 e39499id118 # DNS RR class
48+
DNS_RR_TTL uint32 e39499id119 # DNS RR ttl
49+
DNS_RR_RDATA bytes e39499id120 # DNS RR rdata
50+
DNS_RR_RLENGTH uint16 e39499id124 # DNS RR rlenght
51+
# Note: Old fields DNS_RCODE, DNS_PSIDE and DNS_DO are not available anymore...
4752

4853
# --- SMTP specific fields ---
4954
#SMTP_FLAGS uint8 e8057id200 # SMTP flags

0 commit comments

Comments
 (0)