doc/upgrade: note about dns address swap on responses

Document the change in DNS addresses for ticket 6400. Ticket: https://redmine.openinfosecfoundation.org/issues/6400
5 months ago · 8e8c3040e7
parent f6856eac9c
commit 8e8c3040e7
1 changed files with 4 additions and 0 deletions
--- a/doc/userguide/upgrade/8.0-dns-logging-changes.rst
+++ b/doc/userguide/upgrade/8.0-dns-logging-changes.rst
@ -10,6 +10,10 @@ the ``dns`` object accross ``dns`` and ``alert`` objects.

 Ticket: https://redmine.openinfosecfoundation.org/issues/6281

+Additionally, version ``3`` DNS response messages will now use the IP
+address of the responder as the ``src_ip``, not the client, ticket:
+https://redmine.openinfosecfoundation.org/issues/6400
+
 The changes are summarized below:

 * DNS requests now have a type of ``request`` instead of ``query``.