webapp/events: dns formatting for eve dns v3

Part of #317.
jasonish · Jul 10, 2024 · 566842a · 566842a
1 parent dd5ec88
commit 566842a
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 4 deletions.
diff --git a/webapp/src/formatters.ts b/webapp/src/formatters.ts
@@ -51,12 +51,15 @@ export function formatEventDescription(event: Event): string {
     case "dns": {
       const dns = event._source.dns!;
       let parts = [dns.type.toUpperCase()];
-      if (dns.rrtype) {
-        parts.push(dns.rrtype.toUpperCase());
-      }
-      if (dns.rrname) {
+
+      if (dns.queries[0]) {
+        parts.push(dns.queries[0].rrtype);
+        parts.push(dns.queries[0].rrname);
+      } else if (dns.rrname) {
+        parts.push(dns.rrtype);
         parts.push(dns.rrname);
       }
+
       if (dns.rcode && dns.rcode !== "NOERROR") {
         parts.push(...["-", dns.rcode]);
       }

diff --git a/webapp/src/types.ts b/webapp/src/types.ts
@@ -163,6 +163,11 @@ export interface EveDns {
     rrname: string;
   }[];
 
+  queries: {
+    rrname: string;
+    rrtype: string;
+  }[];
+
   answers?: {
     rdata: string;
     rrname: string;