DNS protocol fields

AA

A boolean value that indicates whether this value is an authoritative answer (AA) to a query. For example, T or F.

addl

The list of additional responses. This list contains all the resource records (RR) found in the addl section. The resource record types are handled in the same way as for the answers field.

answers

A list of resource records that directly answer a DNS query. Each resource record provides specific information about a domain. This may include its IP address, mail server, or other properties, depending on the type of query. All resource records appear in the answers section of a DNS response.

The decoding process represents each resource record by summarizing its contents. Each resource record type has specific decoding rules, depending on the type of information it represents. The following resource record types contains type-specific information when decoded—A, AAAA, BIND9 signing, CNAME, DNSKEY, DS, LOC, MX, NS, NSEC, OPT, PTR, RRSIG, SOA, SPF, SRV, SSHFP, TXT. All other resource record types are decoded by the default decoder. If the resource record type is not known or not specifically handled, it is displayed as UNKNOWN followed by the resource record type numeric value.

auth

The list of authoritative responses. This list contains all the resource records found in the auth section. The resource record types are handled the same way as those for the answers field.

proto

The transport protocol used for the DNS connection, TCP or UDP.

qclass

A 16-bit integer specifying the class of a DNS query.

qclass_name

A descriptive name for the class of a DNS query.

qtype

A 16-bit integer specifying the type of a DNS query.

qtype_name

A descriptive name for the type of a DNS query.

query

The domain name that is the subject of a DNS transaction.

RA

A boolean value indicating the availability of recursive query support in a server, for example, T or F.

rcode

A 16-bit integer specifying the response code to a DNS query.

rcode_name

A descriptive name for the response code to a DNS query.

RD

A boolean value indicating whether a client asked the server to pursue the query recursively, for example, T or F.

rejected

A boolean value indicating whether the server responded with an error code and no query, for example, T or F.

TC

A boolean value indicating whether a message was truncated because of UDP PDU size limits, for example, T or F.

trans_id

A 16-bit identifier assigned to a DNS query.

TTLs

The list of caching intervals for the corresponding answers. The values in the list are separated by an empty space.

Z

A 3-bit integer set to 0 unless Domain Name System Security Extensions (DNSSEC) is used.