Network

Created:2024-06-01 Last Modified:2024-06-24

This document was translated by ChatGPT

#1. DNS

By parsing the DNS (opens new window) protocol, the fields of DNS Request/Response are mapped to the corresponding fields in l7_flow_log. The mapping relationship is shown in the table below:

Tag Field Mapping Table, the following table only includes fields with mapping relationships

Category Name Chinese Request Header Response Header Description
Req. version 协议版本 -- -- --
request_type 请求类型 QTYPE -- --
request_domain 请求域名 QNAME -- Only has value when querying IPv4 or IPv6 addresses
request_resource 请求资源 QNAME -- --
request_id 请求 ID ID ID --
endpoint 端点 QNAME -- --
Resp. response_code 响应码 -- RCODE --
response_status 响应状态 -- RCODE Normal: RCODE=0x0; Client Error: RCODE=0x1/0x3; Server Error: others
response_exception 响应异常 -- RCODE Description of RCODE, refer to RFC 2929 Section 2.3 (opens new window)
response_result 响应结果 -- RDATA --
Trace trace_id TraceID -- -- --
span_id SpanID -- -- --
x_request_id X-Request-ID -- -- --
Misc. -- -- -- -- --

Metrics Field Mapping Table, the following table only includes fields with mapping relationships

Name Chinese Request Response Description
request 请求 -- -- Number of Requests
response 响应 -- -- Number of Responses
log_count 日志总量 -- -- Number of Request Log lines
error 异常 -- -- Client Errors + Server Errors
client_error 客户端异常 -- RCODE Refer to the description of Tag field response_code
server_error 服务端异常 -- RCODE Refer to the description of Tag field response_code
error_ratio 异常比例 -- -- Errors / Responses
client_error_ratio 客户端异常比例 -- -- Client Errors / Responses
server_error_ratio 服务端异常比例 -- -- Server Errors / Responses