DNS Query Type

Networking ASIM Compatible

Synopsis

Converts DNS query type numbers to their corresponding human-readable names using ASIM lookup logic.

Schema

- dns_query_type:
    description: <text>
    field: <ident>
    target_field: <ident>
    if: <script>
    ignore_failure: <boolean>
    ignore_missing: <boolean>
    on_failure: <processor[]>
    on_success: <processor[]>
    tag: <string>

Configuration

The following fields are used to define the processor:

Field	Required	Default	Description
field	Y		Field containing the DNS query type number
target_field	N	Same as field	Field to store the query type name
description	N	-	Explanatory notes
if	N	-	Condition to run
ignore_failure	N	false	See Handling Failures
ignore_missing	N	false	Continue processing if the field is missing
on_failure	N	-	See Handling Failures
on_success	N	-	See Handling Success
tag	N	-	Identifier

Details

The processor accepts DNS query type numbers in various formats (string, integer, float) and converts them to standardized DNS record type names according to IANA specifications. It supports all standard DNS record types including:

• Common types: A, AAAA, CNAME, MX, NS, PTR, SOA, TXT
• Security types: DNSSEC-related records (DS, RRSIG, NSEC, DNSKEY, etc.)
• Service types: SRV, NAPTR, URI, CAA
• Legacy types: MD, MF, MB, MG, MR (obsolete record types)
• Query types: AXFR, IXFR, ANY (zone transfer and special queries)

info

This processor follows IANA DNS Parameters specifications and includes support for both standard record types and special query types used in DNS operations.

note

Numbers in the Private Use range (65280-65534) are mapped to "Reserved for Private Use", while unrecognized numbers default to "Unassigned".

warning

Some DNS record types (like MD, MF, MB) are obsolete and rarely used in modern DNS implementations, but are included for completeness and historical compatibility.

Examples

Basic Usage

Convert a common DNS query type...	{ "query_type": 1 } - dns_query_type: field: query_type
to its readable name:	{ "query_type": "A" }

Using Target Field

Preserve the original number...	{ "dns_type": 28 } - dns_query_type: field: dns_type target_field: dns_type_name
while adding the readable name:	{ "dns_type": 28, "dns_type_name": "AAAA" }

Mail Exchange Records

Mail-related DNS queries...	{ "record_type": "15" } - dns_query_type: field: record_type target_field: record_name
are properly identified:	{ "record_type": "15", "record_name": "MX" }

Service Records

Service discovery queries...	{ "query_id": 33 } - dns_query_type: field: query_id
show service record types:	{ "query_id": "SRV" }

DNSSEC Records

DNSSEC-related queries...	{ "security_type": 48 } - dns_query_type: field: security_type target_field: dnssec_type
are identified for security analysis:	{ "security_type": 48, "dnssec_type": "DNSKEY" }

Zone Transfer Queries

Zone transfer operations...	{ "transfer_type": 252 } - dns_query_type: field: transfer_type target_field: operation_type
are flagged as special operations:	{ "transfer_type": 252, "operation_type": "AXFR" }

Certificate Authority Records

Modern certificate authority records...	{ "cert_query": 257 } - dns_query_type: field: cert_query
are supported for TLS validation:	{ "cert_query": "CAA" }

Private Use Range

Numbers in the private use range...	{ "custom_type": 65300 } - dns_query_type: field: custom_type target_field: type_category
are identified as private:	{ "custom_type": 65300, "type_category": "Reserved for Private Use" }

Unknown Query Types

Unrecognized query types...	{ "unknown_query": 9999 } - dns_query_type: field: unknown_query
default to "Unassigned":	{ "unknown_query": "Unassigned" }