Project

General

Profile

Actions

Documentation #4768

closed

DNS v2 EVE does not longer contain `dns.rdata` but it is still listed in the documentation

Added by Sascha Steinbiss 11 months ago. Updated 8 months ago.

Status:
Closed
Priority:
Low
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

The RTD documentation for the DNS EVE-JSON fields (15.1.2.5.1 https://suricata.readthedocs.io/en/latest/output/eve/eve-json-format.html#id4) still lists rdata as being a field in the dns sub-object for DNS answers. However, in the Rust logging code there is no such field being added. Rdata information is only given as part of the dns.answers or dns.grouped output.

Actions

Also available in: Atom PDF