From bfa2720a81efbab660fa34b7e382b81b10cb12c5 Mon Sep 17 00:00:00 2001
From: Seth Hall <seth@icir.org>
Date: Sun, 15 Apr 2012 22:52:48 -0400
Subject: [PATCH] Removing QR flag from DNS log in response to question on
 mailing list.

---
 scripts/base/protocols/dns/main.bro | 2 --
 1 file changed, 2 deletions(-)

diff --git a/scripts/base/protocols/dns/main.bro b/scripts/base/protocols/dns/main.bro
index f73a947b5f..c50a8bdc54 100644
--- a/scripts/base/protocols/dns/main.bro
+++ b/scripts/base/protocols/dns/main.bro
@@ -39,8 +39,6 @@ export {
 		rcode:         count              &log &optional;
 		## A descriptive name for the response code value.
 		rcode_name:    string             &log &optional;
-		## Whether the message is a query (F) or response (T).
-		QR:            bool               &log &default=F;
 		## The Authoritative Answer bit for response messages specifies that
 		## the responding name server is an authority for the domain name
 		## in the question section.