dns-response-with-metadata.json

{
    "timestamp": "2017-04-20T21:15:58.732859+0000",
    "flow_id": 1507173365328989,
    "pcap_cnt": 2,
    "event_type": "dns",
    "src_ip": "10.16.1.1",
    "src_port": 53,
    "dest_ip": "10.16.1.11",
    "dest_port": 41805,
    "proto": "UDP",
    "dns": {
	"type": "answer",
	"id": 36146,
	"rcode": "NOERROR",
	"answers": [
	    {
		"rrname": "www.suricata-ids.org",
		"rrtype": "CNAME",
		"ttl": 3544,
		"rdata": "suricata-ids.org"
	    },
	    {
		"rrname": "suricata-ids.org",
		"rrtype": "A",
		"ttl": 244,
		"rdata": "192.0.78.24"
	    },
	    {
		"rrname": "suricata-ids.org",
		"rrtype": "A",
		"ttl": 244,
		"rdata": "192.0.78.25"
	    }
	],
	"metadata": {
	    "A": [
		"192.168.0.78.24",
		"192.168.0.78.25"
	    ],
	    "CNAME": [
		"suricata-ids.org"
	    ],
	}
    }
}