8000 Expose "class" for objects · Issue #531 · dmachard/DNS-collector · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Expose "class" for objects #531
Closed
@johnhtodd

Description

@johnhtodd

Is your feature request related to a problem? Please describe.
While it is infrequent, there is a need to understand the "class" value for queries (IN, CH, etc.) - it would be good for completeness to have this as an output field. While it may be seen as "almost always" set to "IN", it is not always the case and debugging for DOS attacks need full understanding of class.

Describe the solution you'd like
Add "class" as a field under "dns" results.

Additional context
The additional data weight of one field could be counteracted by implementation of #527 which would allow removal of field data before forwarding on to next steps in the pipeline or to other destinations.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0