User Tools

Site Tools


pom-ng:proto:dns

This is an old revision of the document!


Protocol dns

This module parses DNS connections as defined in RFC 1035 and others.

Events

Name Payload associated Description
dns_recordnoContains all the information about a DNS record from the reply of a server.

dns_record

This event is generated for each record seen in a DNS reply.

Field Type Description
namestringName of the record.
ttluint32Time to live.
typeuint16Record type.
classuint16Record class.
valuessee belowValues of the RR.

Depending on the RR type, multiple values are available :

RR Type Value Type Description
Aaipv4IPv4 address of the A record.
AAAAaaaaipv6IPv6 address of the AAAA record.
CNAMEcnamestringCanonical name.
PTRptrstringPointer name.
MXmx_prefuint16MX preference.
mxstringMail exchange server.

Packet fields

Name Type Description
iduint16ID.
responseboolTrue is this is a response from a server. False otherwise.
rcodeuint8Response code.
qdcountuint16Question count.
ancountuint16Answer count.
nscountuint16Name server count.
arcountuint16Additional record count.

Parameters

None.

pom-ng/proto/dns.1351896667.txt.gz · Last modified: 2020/05/26 21:59 (external edit)