Network DNS Traffic

Quick Start

uv tool install eventum-generator
git clone https://github.com/eventum-generator/content-packs.git
cd content-packs
eventum generate \
  --path generators/network-dns/generator.yml \
  --id dns \
  --live-mode true

Event Types

Realism Features

• Weighted query type distribution matching typical enterprise DNS traffic
• Mixed internal/external domains per template (e.g. 35% internal for A records, 90% for SRV)
• Response code distribution — ~86% NOERROR, ~10% NXDOMAIN, ~3% SERVFAIL, ~1% REFUSED
• Realistic answer data — CNAME chains, MX priorities, SRV records for Active Directory services
• 40 real-world external domains and 30 internal service hostnames
• Transport variation — UDP (~97%) vs TCP (~3%), higher TCP for TXT and SOA queries

Sample Output

{
  "@timestamp": "2026-02-21T12:00:01.234567+00:00",
  "dns": {
    "answers": [
      {
        "data": "142.250.80.4",
        "name": "www.google.com",
        "type": "A"
      }
    ],
    "question": {
      "name": "www.google.com",
      "type": "A"
    },
    "response_code": "NOERROR",
    "type": "answer"
  },
  "event": {
    "category": [
      "network"
    ],
    "dataset": "network_traffic.dns",
    "kind": "event"
  },
  "network": {
    "protocol": "dns",
    "transport": "udp"
  }
}

Parameters