This document was translated by ChatGPT

1. DNS

By parsing the DNS (opens new window) protocol, the fields of DNS Request/Response are mapped to the corresponding fields in l7_flow_log. The mapping relationship is shown in the table below:

Tag Field Mapping Table, the following table only includes fields with mapping relationships

Category	Name	Chinese	Request Header	Response Header	Description
Req.	version	协议版本	--	--	--
	request_type	请求类型	QTYPE	--	--
	request_domain	请求域名	QNAME	--	Only has value when querying IPv4 or IPv6 addresses
	request_resource	请求资源	QNAME	--	--
	request_id	请求 ID	ID	ID	--
	endpoint	端点	QNAME	--	--
Resp.	response_code	响应码	--	RCODE	--
	response_status	响应状态	--	RCODE	Normal: RCODE=0x0; Client Error: RCODE=0x1/0x3; Server Error: others
	response_exception	响应异常	--	RCODE	Description of RCODE, refer to RFC 2929 Section 2.3 (opens new window)
	response_result	响应结果	--	RDATA	--
Trace	trace_id	TraceID	--	--	--
	span_id	SpanID	--	--	--
	x_request_id	X-Request-ID	--	--	--
Misc.	--	--	--	--	--

Metrics Field Mapping Table, the following table only includes fields with mapping relationships

Name	Chinese	Request	Response	Description
request	请求	--	--	Number of Requests
response	响应	--	--	Number of Responses
log_count	日志总量	--	--	Number of Request Log lines
error	异常	--	--	Client Errors + Server Errors
client_error	客户端异常	--	RCODE	Refer to the description of Tag field response_code
server_error	服务端异常	--	RCODE	Refer to the description of Tag field response_code
error_ratio	异常比例	--	--	Errors / Responses
client_error_ratio	客户端异常比例	--	--	Client Errors / Responses
server_error_ratio	服务端异常比例	--	--	Server Errors / Responses