--- /dev/null
+pcap: ../../dns-single-request-v1/input.pcap
+
+requires:
+ min-version: 8
+
+checks:
+ - filter:
+ count: 1
+ match:
+ dns.type: request
+ - filter:
+ count: 1
+ match:
+ dns.type: response
--- /dev/null
+Check a simple DNS request and response.
--- /dev/null
+%YAML 1.1
+---
+
+outputs:
+ - eve-log:
+ enabled: yes
+ filename: eve.json
+ types:
+ - dns:
+ version: 2
-pcap: ../dns-single-request-v1/input.pcap
-
-requires:
- features:
- - HAVE_LIBJANSSON
+pcap: ../../../dns-single-request-v1/input.pcap
checks:
- filter: