Hi, Congrats for hard work on new dns protocol decoder ! What you think if you move move new rules/dns.rules to rules/dns-events.rules please ? (like http-events.rules / smtp-events.rules) Regards @Rmkml