zeek/testing/btest/Traces/dns
Johanna Amann 383dce9343 Fix parsing of EDNS rcode
The EDNS rcode was incorrectly calculated. The extended rcode is formed
by taking the upper 8 bits of the extended rcode field, plus the lower 4
bits of the existing rcode.

This also adds a new trace with an extended rcode, and a testcase
parsing it.

Reported by dwhitemv25.

Fixes GH-4656
2025-07-24 14:57:00 +01:00
..
dns-binds.pcap Add btests for DNS WKS and BINDS 2021-09-01 12:00:50 -05:00
dns-wks.pcap Add btest for DNS WKS RR. 2021-07-14 21:43:36 -05:00
dns_extended_rcode.pcap Fix parsing of EDNS rcode 2025-07-24 14:57:00 +01:00
dynamic-update.pcap Add weird for unhandled opcodes in DNS analyzer 2024-09-04 13:01:24 -07:00
hinfo.pcap dns_HINFO_reply event was never being generated. 2021-07-15 09:56:38 -05:00
loc-29-trunc.pcap Support for additional DNS RR Type: LOC[29], SSHFP[44], NSEC3PARAM[51], custom BIND9 signaling[65534] 2020-11-11 13:35:51 -07:00
long-connection.pcap Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
mdns.pcap IPv6 support for detect-external-names and testcase 2025-02-04 17:34:43 +00:00
naptr.pcap DNS: Implement NAPTR RR support 2025-06-24 17:43:27 +02:00
proto255.pcap Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
sshfp-trunc.pcap Support for additional DNS RR Type: LOC[29], SSHFP[44], NSEC3PARAM[51], custom BIND9 signaling[65534] 2020-11-11 13:35:51 -07:00
tkey.pcap Add DNS TKEY event 2024-08-16 10:20:42 -04:00