--- /dev/null
+requires:
+ min-version: 8
+
+args:
+ - -k none
+
+checks:
+
+ - filter:
+ count: 1
+ match:
+ event_type: dns
+ dns.type: request
+ dns.queries[0].rrname: _sip._udp.sip.voice.google.com
+ dns.queries[0].rrtype: SRV
+
+ - filter:
+ count: 1
+ match:
+ event_type: dns
+ dns.type: response
+ dns.queries[0].rrname: _sip._udp.sip.voice.google.com
+ dns.queries[0].rrtype: SRV
+ dns.rcode: NOERROR
+ dns.answers[0].srv.priority: 20
+ dns.answers[0].srv.weight: 1
+ dns.answers[0].srv.port: 5060
+ dns.answers[0].srv.name: sip-anycast-2.voice.google.com
+ dns.answers[1].srv.priority: 10
+ dns.answers[1].srv.weight: 1
+ dns.answers[1].srv.port: 5060
+ dns.answers[1].srv.name: sip-anycast-1.voice.google.com