According to the RFC 1035, DNS query or response have several fields in their header which are not yet defined in CybOX. Therefore, it could be relevant to add these identifiers to DNSQueryObjectType :
- ID : A 16 bit identifier assigned by the program that generates any kind of query. This identifier is copied the corresponding reply and can be used by the requester to match up replies to outstanding queries.
<xs:element minOccurs="0" name="Identifier" type="cyboxCommon:HexBinaryObjectPropertyType">
<xs:annotation>
<xs:documentation> The Identifier field specifies the ID field of the DNS Query.</xs:documentation>
</xs:annotation>
</xs:element>