Technically OPTIONS queries can arrive over either UDP or TCP, but practically I only ever see them over UDP. I could create an additional field in the feed that will say what the L4 protocol field is if that would be better and more helpful. Otherwise this might be fine for now?
Technically OPTIONS queries can arrive over either UDP or TCP, but practically I only ever see them over UDP. I could create an additional field in the feed that will say what the L4 protocol field is if that would be better and more helpful. Otherwise this might be fine for now?