]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
dns: Logging of Z-bit
authorOdin Jenseg <odin@mnemonic.no>
Tue, 8 Jun 2021 19:55:36 +0000 (21:55 +0200)
committerShivani Bhardwaj <shivanib134@gmail.com>
Thu, 20 Jan 2022 14:45:04 +0000 (20:15 +0530)
[Edit by Jason Ish: fix flag bit value]

Ticket #4515

(cherry picked from commit dfb6f105e8b104bf27cce24b650d047d0925c145)

rust/src/dns/log.rs

index c27076be45ec2f3667912efd3ddb56d7ad6dc212..621e6017496dd96027ebe322c54ada544d6fdde2 100644 (file)
@@ -484,6 +484,9 @@ fn dns_log_json_answer(js: &mut JsonBuilder, response: &DNSResponse, flags: u64)
     if header.flags & 0x0080 != 0 {
         js.set_bool("ra", true)?;
     }
+    if header.flags & 0x0040 != 0 {
+        js.set_bool("z", true)?;
+    }
 
     for query in &response.queries {
         js.set_string_from_bytes("rrname", &query.name)?;
@@ -675,6 +678,9 @@ fn dns_log_json_answer_v1(header: &DNSHeader, answer: &DNSAnswerEntry)
     if header.flags & 0x0080 != 0 {
         js.set_bool("ra", true)?;
     }
+    if header.flags & 0x0040 != 0 {
+        js.set_bool("z", true)?;
+    }
     js.set_string("rcode", &dns_rcode_string(header.flags))?;
     js.set_string_from_bytes("rrname", &answer.name)?;
     js.set_string("rrtype", &dns_rrtype_string(answer.rrtype))?;