From 2a5d79e42609bd5ae0d0456cd5c458e20670160e Mon Sep 17 00:00:00 2001 From: Odin Jenseg Date: Tue, 8 Jun 2021 21:56:41 +0200 Subject: [PATCH] doc/eve-json-format/dns: Describing Z-bit --- doc/userguide/output/eve/eve-json-format.rst | 1 + 1 file changed, 1 insertion(+) diff --git a/doc/userguide/output/eve/eve-json-format.rst b/doc/userguide/output/eve/eve-json-format.rst index b1f5ee2dfd..936e24f40c 100644 --- a/doc/userguide/output/eve/eve-json-format.rst +++ b/doc/userguide/output/eve/eve-json-format.rst @@ -436,6 +436,7 @@ Outline of fields seen in the different kinds of DNS events: * "tc": Indicating in case of DNS answer flag, Truncation flag (ex: true if set) * "rd": Indicating in case of DNS answer flag, Recursion Desired flag (ex: true if set) * "ra": Indicating in case of DNS answer flag, Recursion Available flag (ex: true if set) +* "z": Indicating in case of DNS answer flag, Reserved bit (ex: true if set) * "rcode": (ex: NOERROR) * "rrname": Resource Record Name (ex: a domain name) * "rrtype": Resource Record Type (ex: A, AAAA, NS, PTR)