Next: dns variables, Up: dns Analysis Script
dns_mapping
record
All of the events handled by the module include at least one
record of DNS mapping information, defined by the dns_mapping
type shown in the example below.
The corresponding fields are:
creation_time
'req_host
'req_addr
'0.0.0.0
if this was not
an address lookup.
valid
'hostname
'"<none>"
if an answer was received but
it indicated there was no PTR record for the given address.
addrs
'type dns_mapping: record { creation_time: time; # When the mapping was created. req_host: string; # The hostname in the request, if any. req_addr: addr; # The address in the request, if any. valid: bool; # Whether we received an answer. hostname: string; # The hostname in the answer, or "<none>". addrs: set[addr]; # The addresses in the answer, if any. };