Capture DNS traffic

edit

The dns section of the packetbeat.yml config file specifies configuration options for the DNS protocol. The DNS protocol supports processing DNS messages on UDP. Here is a sample configuration section for DNS:

packetbeat.protocols:
- type: dns
  ports: [53]
  include_authorities: true
  include_additionals: true

Configuration options

edit

Also see Common protocol options.

include_authorities

edit

If this option is enabled, dns.authority fields (authority resource records) are added to DNS events. The default is false.

include_additionals

edit

If this option is enabled, dns.additionals fields (additional resource records) are added to DNS events. The default is false.