]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
dns: Logging of Z-bit
authorOdin Jenseg <odin@mnemonic.no>
Tue, 8 Jun 2021 19:55:36 +0000 (21:55 +0200)
committerJeff Lucovsky <jeff@lucovsky.org>
Sat, 15 Jan 2022 13:01:17 +0000 (08:01 -0500)
[Edit by Jason Ish: fix flag bit value]

Ticket #4515

(cherry picked from commit dfb6f105e8b104bf27cce24b650d047d0925c145)

rust/src/dns/log.rs

index 8225508fce0d8ea86d3ec89af2a83b5eba2cc741..1b522bac50fa1e1506917aec4a6e11830456c0f0 100644 (file)
@@ -469,6 +469,9 @@ fn dns_log_json_answer(response: &DNSResponse, flags: u64) -> Json
     if header.flags & 0x0080 != 0 {
         js.set_boolean("ra", true);
     }
+    if header.flags & 0x0040 != 0 {
+        js.set_boolean("z", true);
+    }
 
     for query in &response.queries {
         js.set_string_from_bytes("rrname", &query.name);
@@ -624,6 +627,9 @@ fn dns_log_json_answer_v1(header: &DNSHeader, answer: &DNSAnswerEntry)
     if header.flags & 0x0080 != 0 {
         js.set_boolean("ra", true);
     }
+    if header.flags & 0x0040 != 0 {
+        js.set_boolean("z", true);
+    }
     js.set_string("rcode", &dns_rcode_string(header.flags));
     js.set_string_from_bytes("rrname", &answer.name);
     js.set_string("rrtype", &dns_rrtype_string(answer.rrtype));