From d66c03628e19e3160735e952c5af79c237fdfc59 Mon Sep 17 00:00:00 2001
From: Mohamed Mahmoud <mmahmoud@redhat.com>
Date: Thu, 26 Oct 2023 11:29:14 -0400
Subject: [PATCH] dbg DNS over TCP NA fields

Signed-off-by: Mohamed Mahmoud <mmahmoud@redhat.com>
---
 bpf/dns_tracker.h                  |  11 +++--
 bpf/flows.c                        |   6 ++-
 bpf/types.h                        |   1 +
 pkg/decode/decode_protobuf.go      |   2 +
 pkg/decode/decode_protobuf_test.go |  16 ++++++-
 pkg/ebpf/bpf_bpfeb.go              |   1 +
 pkg/ebpf/bpf_bpfeb.o               | Bin 92752 -> 93000 bytes
 pkg/ebpf/bpf_bpfel.go              |   1 +
 pkg/ebpf/bpf_bpfel.o               | Bin 94504 -> 94760 bytes
 pkg/exporter/proto.go              |   2 +
 pkg/flow/record.go                 |   4 ++
 pkg/flow/record_test.go            |   2 +
 pkg/pbflow/flow.pb.go              |  70 ++++++++++++++++-------------
 proto/flow.proto                   |   1 +
 14 files changed, 80 insertions(+), 37 deletions(-)

diff --git a/bpf/dns_tracker.h b/bpf/dns_tracker.h
index 571526958..9fd7a5228 100644
--- a/bpf/dns_tracker.h
+++ b/bpf/dns_tracker.h
@@ -9,6 +9,7 @@
 #define DNS_PORT        53
 #define DNS_QR_FLAG     0x8000
 #define UDP_MAXMSG      512
+#define EINVAL          22
 
 struct dns_header {
     u16 id;
@@ -64,21 +65,22 @@ static __always_inline u8 calc_dns_header_offset(pkt_info *pkt, void *data_end)
     return len;
 }
 
-static __always_inline void track_dns_packet(struct __sk_buff *skb, pkt_info *pkt) {
+static __always_inline int track_dns_packet(struct __sk_buff *skb, pkt_info *pkt) {
     void *data_end = (void *)(long)skb->data_end;
     if (pkt->id->dst_port == DNS_PORT || pkt->id->src_port == DNS_PORT) {
         dns_flow_id dns_req;
 
         u8 len = calc_dns_header_offset(pkt, data_end);
         if (!len) {
-            return;
+            return EINVAL;
         }
 
         struct dns_header dns;
+        int ret;
         u32 dns_offset = (long)pkt->l4_hdr - (long)skb->data + len;
 
-        if (bpf_skb_load_bytes(skb, dns_offset, &dns, sizeof(dns)) < 0) {
-            return;
+        if ((ret = bpf_skb_load_bytes(skb, dns_offset, &dns, sizeof(dns))) < 0) {
+            return -ret;
         }
 
         u16 dns_id = bpf_ntohs(dns.id);
@@ -101,6 +103,7 @@ static __always_inline void track_dns_packet(struct __sk_buff *skb, pkt_info *pk
              }
         } // end of dns response
     } // end of dns port check
+    return 0;
 }
 
 #endif // __DNS_TRACKER_H__
diff --git a/bpf/flows.c b/bpf/flows.c
index 219660e64..8e633a12a 100644
--- a/bpf/flows.c
+++ b/bpf/flows.c
@@ -72,9 +72,9 @@ static inline int flow_monitor(struct __sk_buff *skb, u8 direction) {
         // This is currently not to be enabled by default.
         calculate_flow_rtt(&pkt, direction, data_end);
     }
-
+    int dns_errno = 0;
     if (enable_dns_tracking) {
-        track_dns_packet(skb, &pkt);
+        dns_errno = track_dns_packet(skb, &pkt);
     }
     // TODO: we need to add spinlock here when we deprecate versions prior to 5.1, or provide
     // a spinlocked alternative version and use it selectively https://lwn.net/Articles/779120/
@@ -97,6 +97,7 @@ static inline int flow_monitor(struct __sk_buff *skb, u8 direction) {
         aggregate_flow->dns_record.id = pkt.dns_id;
         aggregate_flow->dns_record.flags = pkt.dns_flags;
         aggregate_flow->dns_record.latency = pkt.dns_latency;
+        aggregate_flow->dns_record.errno = dns_errno;
         long ret = bpf_map_update_elem(&aggregated_flows, &id, aggregate_flow, BPF_ANY);
         if (trace_messages && ret != 0) {
             // usually error -16 (-EBUSY) is printed here.
@@ -119,6 +120,7 @@ static inline int flow_monitor(struct __sk_buff *skb, u8 direction) {
             .dns_record.id = pkt.dns_id,
             .dns_record.flags = pkt.dns_flags,
             .dns_record.latency = pkt.dns_latency,
+            .dns_record.errno = dns_errno,
         };
 
         // even if we know that the entry is new, another CPU might be concurrently inserting a flow
diff --git a/bpf/types.h b/bpf/types.h
index f9790427b..7d50bcc59 100644
--- a/bpf/types.h
+++ b/bpf/types.h
@@ -89,6 +89,7 @@ typedef struct flow_metrics_t {
         u16 id;
         u16 flags;
         u64 latency;
+        u8 errno;
     } __attribute__((packed)) dns_record;
     u64 flow_rtt;
 } __attribute__((packed)) flow_metrics;
diff --git a/pkg/decode/decode_protobuf.go b/pkg/decode/decode_protobuf.go
index e91797914..694652589 100644
--- a/pkg/decode/decode_protobuf.go
+++ b/pkg/decode/decode_protobuf.go
@@ -90,11 +90,13 @@ func PBFlowToMap(flow *pbflow.Record) config.GenericMap {
 		}
 	}
 
+	out["DnsErrno"] = flow.GetDnsErrno()
 	if flow.GetDnsId() != 0 {
 		out["DnsLatencyMs"] = flow.DnsLatency.AsDuration().Milliseconds()
 		out["DnsId"] = flow.GetDnsId()
 		out["DnsFlags"] = flow.GetDnsFlags()
 		out["DnsFlagsResponseCode"] = dnsRcodeToStr(flow.GetDnsFlags() & 0xF)
+		out["DnsErrno"] = uint32(0)
 	}
 
 	if flow.GetPktDropLatestDropCause() != 0 {
diff --git a/pkg/decode/decode_protobuf_test.go b/pkg/decode/decode_protobuf_test.go
index 717faae54..67a6cdf77 100644
--- a/pkg/decode/decode_protobuf_test.go
+++ b/pkg/decode/decode_protobuf_test.go
@@ -55,7 +55,8 @@ func TestDecodeProtobuf(t *testing.T) {
 				AgentIp: &pbflow.IP{
 					IpFamily: &pbflow.IP_Ipv4{Ipv4: 0x0a090807},
 				},
-				Flags: 0x100,
+				Flags:    0x100,
+				DnsErrno: 0,
 			},
 			expected: &config.GenericMap{
 				"FlowDirection":   1,
@@ -76,6 +77,7 @@ func TestDecodeProtobuf(t *testing.T) {
 				"TimeFlowEndMs":   someTime.UnixMilli(),
 				"Interface":       "eth0",
 				"AgentIP":         "10.9.8.7",
+				"DnsErrno":        uint32(0),
 			},
 		},
 		{
@@ -109,6 +111,7 @@ func TestDecodeProtobuf(t *testing.T) {
 				AgentIp: &pbflow.IP{
 					IpFamily: &pbflow.IP_Ipv4{Ipv4: 0x0a090807},
 				},
+				DnsErrno: 0,
 			},
 			expected: &config.GenericMap{
 				"FlowDirection":   1,
@@ -128,6 +131,7 @@ func TestDecodeProtobuf(t *testing.T) {
 				"TimeFlowEndMs":   someTime.UnixMilli(),
 				"Interface":       "eth0",
 				"AgentIP":         "10.9.8.7",
+				"DnsErrno":        uint32(0),
 			},
 		},
 		{
@@ -161,6 +165,7 @@ func TestDecodeProtobuf(t *testing.T) {
 				},
 				IcmpType: 8,
 				IcmpCode: 0,
+				DnsErrno: 0,
 			},
 			expected: &config.GenericMap{
 				"FlowDirection":   1,
@@ -180,6 +185,7 @@ func TestDecodeProtobuf(t *testing.T) {
 				"AgentIP":         "10.9.8.7",
 				"IcmpType":        uint32(8),
 				"IcmpCode":        uint32(0),
+				"DnsErrno":        uint32(0),
 			},
 		},
 		{
@@ -213,6 +219,7 @@ func TestDecodeProtobuf(t *testing.T) {
 				},
 				IcmpType: 128,
 				IcmpCode: 0,
+				DnsErrno: 0,
 			},
 			expected: &config.GenericMap{
 				"FlowDirection":   1,
@@ -232,6 +239,7 @@ func TestDecodeProtobuf(t *testing.T) {
 				"AgentIP":         "101:101:101:101:101:101:101:101",
 				"IcmpType":        uint32(128),
 				"IcmpCode":        uint32(0),
+				"DnsErrno":        uint32(0),
 			},
 		},
 		{
@@ -264,6 +272,7 @@ func TestDecodeProtobuf(t *testing.T) {
 				AgentIp: &pbflow.IP{
 					IpFamily: &pbflow.IP_Ipv4{Ipv4: 0x0a090807},
 				},
+				DnsErrno: 0,
 			},
 			expected: &config.GenericMap{
 				"FlowDirection":   1,
@@ -277,6 +286,7 @@ func TestDecodeProtobuf(t *testing.T) {
 				"TimeFlowEndMs":   someTime.UnixMilli(),
 				"Interface":       "eth0",
 				"AgentIP":         "10.9.8.7",
+				"DnsErrno":        uint32(0),
 			},
 		},
 		{
@@ -319,6 +329,7 @@ func TestDecodeProtobuf(t *testing.T) {
 				DnsLatency:             durationpb.New(someDuration),
 				DnsId:                  1,
 				DnsFlags:               0x8001,
+				DnsErrno:               0,
 				TimeFlowRtt:            durationpb.New(someDuration),
 			},
 			expected: &config.GenericMap{
@@ -349,6 +360,7 @@ func TestDecodeProtobuf(t *testing.T) {
 				"DnsId":                  uint32(1),
 				"DnsFlags":               uint32(0x8001),
 				"DnsFlagsResponseCode":   "FormErr",
+				"DnsErrno":               uint32(0),
 				"TimeFlowRttNs":          someDuration.Nanoseconds(),
 			},
 		},
@@ -407,6 +419,7 @@ func TestPBFlowToMap(t *testing.T) {
 		DnsLatency:             durationpb.New(someDuration),
 		DnsId:                  1,
 		DnsFlags:               0x80,
+		DnsErrno:               0,
 		TimeFlowRtt:            durationpb.New(someDuration),
 	}
 
@@ -441,6 +454,7 @@ func TestPBFlowToMap(t *testing.T) {
 		"DnsId":                  uint32(1),
 		"DnsFlags":               uint32(0x80),
 		"DnsFlagsResponseCode":   "NoError",
+		"DnsErrno":               uint32(0),
 		"TimeFlowRttNs":          someDuration.Nanoseconds(),
 	}, out)
 
diff --git a/pkg/ebpf/bpf_bpfeb.go b/pkg/ebpf/bpf_bpfeb.go
index bb10a1591..7f6ceebd8 100644
--- a/pkg/ebpf/bpf_bpfeb.go
+++ b/pkg/ebpf/bpf_bpfeb.go
@@ -25,6 +25,7 @@ type BpfDnsRecordT struct {
 	Id      uint16
 	Flags   uint16
 	Latency uint64
+	Errno   uint8
 }
 
 type BpfFlowId BpfFlowIdT
diff --git a/pkg/ebpf/bpf_bpfeb.o b/pkg/ebpf/bpf_bpfeb.o
index 12b4001b8b2cf7624ef8cbbdfb3d4375a891a48f..0af59e932379b347f41e3564b964d6d3cb0ded49 100644
GIT binary patch
delta 8769
zcmcgweQ;FQbwBs*3Vo7FDo6_$SYaUvNoZHAuSG~kU;-;FTLKHSF~nMgKr+FwATT1f
zS@~nenubmVSN0?Qn8=C8r74prvrI(NB*<;2R>t;NoguB<A&rP#7rSJl=_rldq@};}
z-hFykJN~DgOz+Hl=l*`@oO{nb@80|Fds8>lCjTLAxXL&j`A+aR1=TwUrPt4Q$~c)z
zJGs(c#CIa#?JRq9`3`-MJ}(axuHCSW;euC?9%S5pKi}aMq^*{0p%&S;evAB|(6`*`
z=Z0$cte^FiD@WHC3ZKmN6$-zcLcL73_zG7C`whE=eqqOR*6u$H+>*TD+nMwK5ca;`
zUC8o+Z(s5&CCy$jE{ndnR?d`Xi#&O^{E2NM4QZ%5nMXC8kL9^^0U~d2F1-r5<lM@8
zR}??O@<uh^iPD3XShg`l7v+VDVwq7Hsk{-hNV-vAOZCkBZ`rx?j}P1YQx|Da9;iGa
zPAA`~{Fx!n%d3H%8_uv&>o1dWN`D#XZ;8BBQCvCR!fHcoeDGdB*T!Rfrvi-TC|6#N
z@tp{`H#rxm^<*dul4UhDnLlUUGjH6Z<bj&?o~_R_Bsx22iL(9-vW9TuqJ`<K9eA)m
zla@1c<D}x_mJIi&%fGH~Sdl@WV+^aMmK5~+mQ0uV4ZHsj^JSzV@V}VmcN>0}^W|o^
zE#qAIJ&vE`?6yJ~*mO5@lF@P!Z^`1ufOu1OHqLqb-?+C^Zr^;(`^;<iBJxk0+Qswo
zZd1Q_LB^VE#4$P2Tq=5#KWLuwCMUKHripWMYh-0&kXuS!i&%4s&)|LF&wmE*2mjn>
z@MYki{S2Ph^fS!&i+r-4xVEUjoV*$dctjw1>!F>7_((Q&R3<wf`G!}tCFk}O3b7%X
z)A`nt%ntU)9B7xf9uJ6CnX^A29!xgve_eR{U%NLhZyh)x#*=MdJZfY$c!~Im{#$aQ
zYl|Twm%5)e43Y!gXVXB_QaRUMk|iETH4j%T={xksMq{sEP7DX~x{1VUT%EYq5bZsD
z>EiujLKa^v&HJ%6$w(B#Nf13YEe~8QE&4#QWs1F<V)Y;L^^2i3`?3^WWt$OYp@MQB
z(Y`!6cd^9Sw?f``31Xex&Z1l%V-b=gmr6?ZH6m~W<}aY@k0Eo|7p@W9R)U*Cy+h7i
zDiu+gA!|fTHpx<PR`%fjHF*K|Yw{ZIZ_8V_|6F=UO2vQ6%8`=%=o%H-qgIO)t&=??
zJB(<fygIT|w8*)Uw?#xwyi&NLBi**ZJ^F-JkIUIt3Y*Vq%z3Roq}4~=y6=6r9{o$X
z{ngFY-_@8OY4vxt`c19=&&jb@2P3jzCX!xu>hNiQvtK?jQ=gPGRfY`y>?8Tr+pA>!
zc8>hy)(ZK`?TTdO2kX7^lMi#{#~)?q9X@sH_zAf59PjV4>T>@-u9j7QSDYOB*SYkx
zTB5Qm^7&sLHTH&*zxd_bnOmbo**{%K0Oex`VjSopu`HV?|FXj0CgH;lnm?vtAMk|y
z^wZ5^I$8IhFXktPiR!Ui?)V9bAdJglya->1ZjNZ@=g=4)Px*v~^MPk<T>TI_-vE3^
z)0YCzYPg1|B3HxcFHwPrtPY|?uVcrp@M{=5cSTU)7m2QJ0uC$uH$-D>4?p&gU>5%X
zZB@iHjOA0&r(x{H6$1*#NwidAv#A)=2<~7=!<f(&mu*a{R9sQ|Ya}AepueMGZ2A>y
z#H~w69KbeFF>mWzgCwE|xDxGfz^zddv3zWHl`16`fd(ou3N~;`Wkfls1}mcqKS!dE
z?PCg$6AdDz8y)-`qL+ZHCKk6>r2^cwh3IqwtG-G_=yVv!upM?`UJO7VNC_z5SNc~-
z#IbJ$!YNn<ywF}u>HmquX|^A-@k2PNCEh{G1H+0qL^OpI1+FXn2GK1%v%rMH?-G5;
z4NPhnDGp3)82TW3<_xxB^v7^jJNRLuIB-Y>1loGpP)G$}r351mUA7y5fmK3RZ0uwt
zqyk*fPpA$rl6VPoCZqyt!>Ss>DhbUf{jW(}*Z_RT#t)Y!NR0SFsAuwUJBeY;+R(h_
zfMtZ0V~>a%SO=VIW6)Nq@u>#SkhqKt)I{uMyrA!}@xx;zw%0=6XX8f_xtPUBNzH&F
zLL}O7KCYQm7_+ovEm5uGp!BuZmHtJ{Vgy_lUTj~d0(ivHJO11r22>Zf?Gulv4(gl$
z9EYLB4b}%0{yyG_Tz5KTTn>Ck>DeEvqJCE4Uy<m6eS`9EuP1Q~18V57^a-+v5)e__
zVZlHJ)ZR^E01-D_SNajmdc1fWCNzxqbHk*<%08?DwEXc%!Y!H}0fr-tG5^|sNa9%p
z5LOYl{{oX}Bk;U(V2l7Z<=VKT2$Kq<+2qqOGO!68Z`~dHF-JncDu9l!VotH%>QL#i
z3vJ@|6L4@kY{YD_8h8(rav4!$nT=aM!lXjPjcNoI#wuy-u=TskNQ|+5Na2GdCNPH@
zhZV*nnOp^YIYmE;^~W9V{yK?wFv7+wDF#yt-y|`ES>HIVVIT0U!v96$CYD{}{9^yj
zYCwBdleo2lXmdu2K7#en0qogK;=}bYa7M%(qJzzSw!@yIB<>)<&2iO$(l_~){?ABE
zV-+-&E$*O6wYTR-I5HulO#`<6(R?zz$XL@Lo<9fhXgL}8VUjdmPQgf#rEep{&-zJ)
zUnZjxldfq>!+0c3(+Yo+j3DMfv&ukcAsMysZ&n%T43QDW&e@z$BUm8R2s)!=G_ipi
zLFX75ZAkI97Q2Jacgf&=A)+$U`71IyF`~$jtq=T!j2;|KBf~^%zlPK62^?csj{z=V
z>^q6bs74^d$e4zGz}Gd56h<aAj0Pgeh}Ga9V&7-|l!kMGk&y*Gw|7UwYw`Revl@X}
z8kyHH8fYbjlSnT*XwA?t>v35fupS+>`ZbIUwU%iZ?c*Ha+UMf=x3(zar|6tJh-jEQ
z=t#jag@28;%=Ud6X8U*w9<=de$ZnMFhct}+pIV1Cg7K)r75F4!hbtOp{a6Z~P#CG|
zWBW-Bv;9;Go>3TqACI%c9hZo+!|Y<bixhqt2NKxt%Fr<Ecj4kk@EGeE`xVCdVUX>E
z4mM8~itbIPbI>5{cxBa}C*w5EnR~HXut=@K{N5%qhBP}1kLUQreA@0AeCA}~Sh2%4
z=OZY6iifvE;X$Q;&c=M45m*cU85`GO-0bf^V&lePbMG3_E8aJMxJGQ*`o7J!PC%m7
z$3Cy{jKVl1aoNQ;*1y0Nd(aksO^UAdX3tu&*=oYpk_V>F_{69pAw1f+J;N?<U^Y7T
zX#?i4Ulcr$fjm0J`<AQE<OHZ<;9TzbWtBNB`gz}M@{2$Mhg3(MgVo{`&n1`7ns8W{
zUU2#BL6`UNqfw75b3o${x_oxb<<mHH*q1YvgJ<s)FV|H=Ib#kB>bK^yA`uX~&Fw{^
zE71iF9w8TF-j;m#{5x)nCoKyeES&}ZI$PSs_$x?dFQy$9?fkvQ`(57KYx7pvBIYVQ
zU$7O-h|4aYR%W)X6J2|GxT+t|fU7p%c6r{ao#MUW^66T09(?RO?PNvGnIciJGF#Wb
z>FRR^UcFxwbf^14slwil`_dLgLZpRVUj0V2l-`{#zm$idiZ=rlHJt2u(_btKLOGh=
z^9Qazt3^3Mc(%HH&J}YQ@g?vQS}5LcyZY?w3p9E6Y5b(i8{csGoEeu-^J{#><-P41
zAG3ID_$VHJtEd4jS_WU%_#w8mi!lf3*lU5N`CNW!t}=%3{<+4NX?z1mry45PI`DkQ
z<yXyX4%k*5d*8Ind%kD3t;h1%WInrIRCT9ixMt-s*UY%<@+AW<pT@DOF#Iu>_il0d
zqNv83W=@HyN_c&)zNW?1drrAL|50#?=Pz8IKRcabe5mm=4r~1?UWkkT6gb8B6VwEy
zTR1Rl4wqmiX%mpV)0TmyuhA6V6B-}3)Yi@Wp3655y1eH}m*-Cwrx-U~o<9^&%%!Db
z^)AnCSHY)4r+9B8y>`6#4WL+jTYK<6bTZF}JEwRD%+sYJaBzdG=A)HUJU@2%UD`N2
zUw8Rd#~9L6tns@23#PYBJSe8dBW2>KFg&ZxYa7JQgY!6?WNQ9g#hmi~k;VgCh4~_l
z&vkjvCmQe5_&+uel#8_qe&ecXN0(9Wb+H&*j19(puHM7le96U2<ES5Vao!Z_Pq{e1
zBL$-^gL=#h8^y{*!6cOYB3HrqVkvkCxJT2Ep?=WCt42}RI$Oo<Y4&S*aGHMY{34tn
zf9_%je;8Qnpg0b!1z3`if`g0wOQMVY%ej3mfO2ksAwX<`<*^ipVc_GqR7UtG6KRVl
z5L=8x6N@qb0nzPiI)JqS@W<@}=1rKtZrzB0*+I(yf4eO>pxQKu+rkKdM}c+wY2Y|6
zH30t9((RkMKV@&`ZxkyMT68%>P-^)1<`?5!Kd{z$ZUk8CJa=F*=6}L^d;CvW_Xi^L
zn;S)Qg7=j(xV%i^KhF$qPvdehZ{TM&%z<%dN?*tFoQClcYGuLE^Qd`X4z5L==Y_(F
zx)y*wm#Aw)ou9ko(1SWJI}a`t{&8fD#KF%3^D=ZWXOfq-gGW&3W$)lo)OnuSI6-w+
z0r>Ud7+goaU&DWkI;YyvPo>~nDfmtbo?DFT0p0eHp86b}0QRNeAn<APLO>+M{_&ik
z_)4ku>fw2&l2q1$x{jm3MVg)ytm8r8b((%S1z!Q)ujx4_8Xhl*iZ_kroLW9Qt0*d7
zXFPuQaZ&8GMu|VOoE$B%z+DGFc`SZ%;MAA;k3V(hnX^YvpLn`(`MxjgA1~<=FBu&*
zo2YHuwqRFC$!aCTOxJbc&z2=?lng0ZZOKrVErUwdbyb@m9~32?x~>{Ct6QvGVmViv
zMcpElUDp+=SDl$pbc@3L>Y#<|y25p;7xO%vmY+F(rvGqHEprWBmOvopc(+(B8q9y`
z7GZP!A+f^TaY(c+MF=6=xjGm!-|G^~&Ez5BudS`N*^nhMK833lwj}~ys06ERcTbN9
zuEfCty@$F&mV~<{VIIUM-$SPC5j|qcobM40qR$K-7F)!C8D}wMj<L96&a#*^gGa;z
z=C_WBO!Mp!5f&Nd*b(p<<}5_!7#<PIaJm`p6%CpE!G;p}tvLXg$1?#XJC0i+u5NRp
zS5z4lW#(+J-FBaNz^ICvaZC1@W0o8+XDvBo2A^d8Wit+$6^w9WXnoYY{v^V_W6pwJ
R7vm{|lGb7g_ojHF{{gq<_(lK#

delta 8634
zcmchbe{fXSb;r+ryE2jxwuAw#g>5arq(u_!YNbUhkRq92YXukyTNawwwH72`jfGh(
z14>Q2>zbJ=V^RxW%+n<4L`j?(&4jdS*D1=B4C<6g)W-E_YMkN*4{~g$YKq6qR2?fZ
z3H_e;?$f*4`k!_(y)*CK`}v-8?mhRu`+n?B{yb;uO3u(mqqqI9LZ7XuevnWO`uR+`
zM+@m8ZnUl9GZFZUTpujtGwdPSCZ8xSUH<^%d{l_GGPkYaGonJ&Y}L)wBzLZBk{=ZN
z<lVkyqEJq)D;7T4>?;=jSIdecfqsLmt}dwoPxv{ILeQJJ(J$<TPS^=V!A+UdzLtXj
zhrIXv0dtn8eS0!5mo<9jRK*&RD`zX7+)B4F!N}1fs^OU~FQmn&iXJPZ-=MzZ%O$r*
zmHsK$m#X<pv?yd%%Ql2*R-Ua~Ta`nU&yp7KF>_WxE&_fnZv@xot_#seL<Y(6%2>gL
zA@(IYJVfuxs;VPmf99K2*9~z*o(#5#1DS?Utw#>j)QIbuH)_^-9yn^dpGaDDpnnmq
z;MS!Vm7cchP=78h=hme&7SjoPm}q~VEUBxzXA#}WI=q%xwV=DLI!_*|+x>sIv^VO4
z|I01;QuGhGC1q9pPB~crS>8K5jpZb+$kUsH;w^b`^Q;`-GM38P-?{zYx&1J^X6c2{
zcYcoUgTCW)bU*a%pQ8t$w`%%2n!mBWb34X{{%_yj#r6D+_3hg&vag{{JTEUc^oti|
zsIf*IkiCuNVsGYj<E*#fXo($xTQHqDx%E_z*egY>WcNw#=6}q?pyyeK^H;c5!}!2|
z%=}b|Jx_2-v*&_e$efP_Jz`_#+Kv`Od?Xv%t1|7ozUvh`GP92q3lYc^bo}&=yfzNQ
z9@{0aeJLnnvf%Nc*qUj0{B<E`o_Jb}XFC4qkdeP>j);%0A7m!Gn+(w+bN3xL#GFj;
zJCWl-4+ZkpzOu~5p4T@R9lw-UhJr<FiNt+4I&j=i^jNuEc4m$E6B#{IUi7lHZArj~
z1X1VLW%5k<s_!W^pwz#}@*0QN3i;NVdyURF<&85XM(5iy_ti3^^A|G2)rYc+s~a-S
z)vO$SwXCf3mY45QBHUQw-#JknD0}!`FM&3N_EI_fYPl$p_sSZvTDHq_Q7;E@-YZ9N
zJ}xJ5{+hgr^Xt-gwp>ie=Cfr>_e`t&9<_R;J)g>fvkw`2Zpn$WEy9qwul?+B{$17t
z*+E#3Cp3^y*V09H49;DCtsQpT_aArLU0bwvv)10OwfD*9bH(DY>^irldO*|DTKg5P
zeNJnSWG<ge$K<E)|4MGV9+UF=rp!NH-(bjp_)(FZp3cwA{qmSse)(VSmKE<Uk!?RI
z&iw1Y%`VDWMidy7Z+~*g=$Oqk-TYbJ1MNhM-<zKrElt=Q>?N@bkL9I!e6c<Fmn3|7
zU_6@V*#{n%JAS)G{5<ogzkO+GY7l$w5Ya>LkO;xK0?rF~47ORKmOIfoE=9$-#!JCh
zZLZ!yqHsNUTC<mfXEesesm#?F<E1JKmC!{rg2!_uGPDL{#_OUop!g-C(Ry%5@!u1j
zXa9DaW7uosh^<5%$6JhBqcW~B9^91!ijzc>^|+xc(@Gd4dXqaGRs5esS2+MWci4)J
zJY57H*BJM7<%Gs;pH$pQB3cEW(wHZ3RpSyoP%39^fmErSQx0Dz(TrD4l`o6^ia*4C
zj|8d$HgCrzYR3esLW(z$=)xtcYSx(hi`i@q#}Bls0b6KwIvi91kCTXVz>wnCh)&{~
zZE*NqqBMBpO|3)p7xde_1IwSh7pxMr24s6w*^x-<Id;%9VuyC+&`%<PB@HIBSS38)
zp-O1SIEg;?AGiH?;<1-Nf+2_T{n!T%`)oVntp_@VRRT`NVU>V0Ksc@vfFCCuPR@5=
zxr9|hJHJZeB=$*ICA9OONThKI!ow<|Pe`0v4<51k;nEa|(|!n}N@yW5h-C|pX#u#6
z!p;o1gVo?k+is1HQ+P_nA0{z`6$sDSxADWHB(~KO)%a}Ql}jRq6{x|Oe4Fn|Rgl=Z
z3Ib+i3GLWKr9`!bij}=KuK0QE2_#rMo#lUXp*`ZnbAOmX#7RK)A5jUUcBu{{p@khr
zt}6a(>~h#5&VbAnunlPgVv}wfR{SxEUhYf9w{66pz=W)qD`sqQ8BrZs{wZ64L!HW~
z?MoyEka1ny?y&7Ni6q{kbqS5}uB}TdcKlU>Ry;02-Hc{Of^|0){}6iw2}G@gvH#jW
z!ZqChVMIAFBZ26+&F%MKPhdvT35~G=Q8mN%N3n;(V3mNyc<|H@Y5k%9dTT(U_A}Tc
z%fQ@U3QN-bD-vgsVZG|mV(jvIHG}qFlQ<9iX20Fx?lmMXV$W<2D1MN{<&|J0$$Mzt
z9#xDN(<COexjD;@6-`+I=SW<`uHKwf4$MCApyEsTgurdJS<PsEfMI37PU7l4u#aR7
zFs=A^B&OHFt|qiw^}mJhe@@_$DiR+e!!5Zgz;PI}`H^mXC1clb8DBU+Lt5F>B<8TB
z4Wo*$khp~vYjEOkkg*JVqG3|m9iGDV=L8<TlMEj_%qeaqV=XpWBWa9F(x?)Aw2zDc
zu6bif+219j3h|9m#j|9D@NQ^q&*CndJ4(o?WqV4^pyOFGwqc34CY8f0WW-AG8g=*r
z89Onf*r06>zC*?nc)Z4jh)TbOFVAXxrm%fjV?1bLBN`*Y*qFvXtbc4=6R?D_35~e}
zESWU`zM(^GpVGJxd{tv~7@N_UCva0^Y|_}A#)Y{4typ4ffMZyG4A6=to@WfuiesKJ
zK&xM44A2_T7z4D1H0Jnb#aN{n_aD=^Fa@Dq7r=4FKf=Ar0SS${!(<kx6~B$|T=pN-
znEi*cctr8XMDY{{jA{Z0jAikJ&7JtTOtAl?#_T_p#nXx_@cw828I9ThrpvpM5Vn&N
za4iN9usv5}w&UPS(8+dYzv2WwK-fRzu=zo;*jL}jzdzu|ch;sC$mqj&WXCKt{*8jd
zddKg{NNau;UwFYM=5lspONo4<YU}SMe4w=><~O){cUaNZ7ox!4_fIRHQvP4DncsaJ
z?>}Jk=79Or`^7==4Kr9OnjZLut+q~}Mz5WV6i+M0gNn;`KCyipH|$AU+#`#+%grmL
zVoPe=Hu2emMRw*VMp&_n2gx|PXUI_@z3J*X1DgI#SI-T(y7z~!p4VmTctD|}zjY1y
z0o%Z5&!l<YFM_EbxaI<%W<KcZ`4g^goOSiZX-&uHxHFGDEniQQt1phb{yBKMv3~_i
z1-uBVczM0mMkp9_R7f9~r&fueC^z3&CAu4*gay}_i!o={eD=JLlhR2ogQeq9HLs7G
z$u(j{r?|=%yLcv0t2p6DTNUp!XgGS@Q85mGpE&xktLH2+FRm8dj|E+`XTUXkj<`BM
zs-5C#bM-}9cV6D&YMA^ka|CIp7Hf9nv}-TW#_{sjR&k5`XshD+6b+>>X?9fn9KXxe
z)t`cv(c9_jOYGfd?q4g4Qj6!@VB@>4Q-QuEce#3gv+M5}clCl%O~38xcva08<3C(|
zF~>ST3ykk;hDpm{ojgHTFPPT!5lxS|y7zaQ9(Q$5siyl}Jtrrn83tX0r(4tQOf92_
zXXz}vzSqB}=>f~tI(av_dWGKqkkZ$qUO8v^S|{(HD+4OuRaf^6n-|yNrYSaWtP>me
zdGShd@~DWrZpJTMy==hMz5nIv{<x-p!PQrFY5HsC$uhCAGv_|n9=_??JuR-ze=In~
z`;n$=<9j~Q^hq;RE>`Rd&p1)I^YKb`=EFZKonqk62S?xRb5v~eVpr!MAWpGvQFVQy
z!{$V}SiRl*W7n5I`<&wa2^`fsfletEKkGeHXsbRN(~dXBJZ@G6L~t)(US;NQCZ~AD
zTzz}gQPJI3UA@(n$-|FE)laMLzsI~75MLCNf3sd35{B`a*;gT2Qt#oLE>8>RW-gNY
znx=!T!n$A6oeKor^RA}*Tz}7tn(lXXt2My)X%CtzT^dHa*JZ&|*Vtg*@7k?bW5VSn
zNwlAGxo8UQLoP3E&*B8er@flP5Zc;{W5pym?%I9a)_D-D#rwv<TKvipu$I6|?oabC
z9p>kR=1@Afko|=V1N>32Ho)2>IF3WDU|DV!hrrr^WnEw`z9Pi~XbDvC09rsrJS%`_
z{4@?VApg@teHsrfWd37CxAXrTI;U#D`V9C-?gE|wYYFjhT73o$X>c5eN{D~4>HZBo
zpf+Rv0Y-=C{ZrO2E<K>JYhi$Ob8zSRI8X|rIK^?O0SkCVG`?$YAs70=+5`$?;Q53C
z_|6^B1^m660LO8t0r>A=+G}=f6gyIrXg-U>ivy+h3Qqkv9G*t|IgM|ijh{vHcFyg%
z%lx5hEryDZ;1{Yjw8Kcx+8v5hky;3R2RaVTX!GTFxC?F0--81s(u)&M-r*$Le1|%G
z5^eTzco6L#jrn7ex0`KGQDg*gWL}`id9=Axr-N~{d37DWoW)aFd@YM-vUpZ!EC;`M
z^#L{&Wbs<?QFB{Jq(s++%OUY{c`6EN6%H>Blt2t8o#WuuI2=3AM`vCXURcLIoW*Z|
z`Kj;NFE8W^Z*_^kGnVu30^U-}tCCkvTzLI)vDUldz*C2xId&wGeEQI{1J4~i+Sgya
zyrZ-0!tcAqDWfS|Pdm464Rzafq`O+NQ%Bhx>8??AwN;0^?K;$L{_{RjcCJS(H}CHe
z!AkVA$quNtYB*YTNY#<<XvDUM%@=z_NvYL&b+r<!LlHXm%(4Fcy|wIB*KLmVi2I5n
z-C@PmRvj_l>Jd><Z{F?^ezUk&bQB=*Fo$5ku=#$kSYiHIuP7}ESF?z$R9$V=aIQ9|
zd&NU5!y!A!uHk1f?4b~T$31AiykGQ+N%Q7@Q77VN;DBfnNi)G!+8pI-#GK)3!VDY~
zUof7WGZP1aWRBX^463|QTnm&}er$#kqAri`FqGgmGYKr>{erSMfD?b9berP|vC*hV
znllM>RcHpDLeCpU%!E~snWI)cVa{0flo>e0_GvSLIzKqXouT)%Id%w17n(CHcdxhQ
LoH8?cQ272EcJ%EW

diff --git a/pkg/ebpf/bpf_bpfel.go b/pkg/ebpf/bpf_bpfel.go
index 8556d19a5..0f869406b 100644
--- a/pkg/ebpf/bpf_bpfel.go
+++ b/pkg/ebpf/bpf_bpfel.go
@@ -25,6 +25,7 @@ type BpfDnsRecordT struct {
 	Id      uint16
 	Flags   uint16
 	Latency uint64
+	Errno   uint8
 }
 
 type BpfFlowId BpfFlowIdT
diff --git a/pkg/ebpf/bpf_bpfel.o b/pkg/ebpf/bpf_bpfel.o
index 5e001e1de72aa19a7028827941ae9dc6cfda9b3b..f938b3e4570b74b99c7b31e183abbd731f169f01 100644
GIT binary patch
delta 9433
zcmchde^gc1mB-JyKzN{}4+VK3$P*NJ2m%5EnpRMws6_Ec1b+n*e}O?nF%dP%gEU>i
z)Hdi*FG<@~nq?c(G!5x9ftlr0$jqc9H7T7YEy<XaSd)^r8Of@)G%?A1_r3eZ<Lh6Y
z)iry0@4277_u1#%bI-4Lu=`?I_oc87pKN$8vm?Z~9InoW{M7hOc;LR!+0u9}Jn*Bi
zA4qv$U~PDtA^$7zM#R;~yfQ(u(-6XibgwKW6ssm#33!q9uv4-<WTE;bCfRqZt#xvR
zEVg*n9L^Q8#Cq5px>S9VvOql;>zTaN(wyVC2aq#Y-If|BGt@J&anh^q$FoPh9UGVI
zhG(;Pq2=G~F16AFTz<2=EHG<I)x`gYYFGX9s;p4uz`PkNL&JK*@jB|6_$1>8LY>aI
zqwH}}2+iK;eCsu1<xvrhr`zQzaTC&m-|POI46*VACF0y<D-q!#Ld4)PJN1}a<eRDb
zeWe@EQE14yy>?2U%!|jLaoS7Y7qZ)vh1^2aKlO?gyZ*^REBzXDVYm)Qj$3>I@#s_B
zeMrsAToBUf4GG+r`Ho@C3Q?Q07w21VVr7|#yI$1@i}k8f$=RtlDdn3P+Z!r`#MjR*
zXts)>I8)Tyx!I8yt$c?MiO&NQ^Ja#Wc`OzOkeeQxTjMOnxp>y29ILBzOtJO0SsXw>
zDzLdp?JFpXZ~c;GZSJ_)PTh8OVSTZn^8e6{78U0F1HJ!Sh5yWM^wqhyO+5I7u-dKJ
zyFjS(b3coC1>YAvM7*qiRg@$DJrGhHCPSJJEma{U&&$JV!@Sk9O+7ttuY6D?%`cP<
zYVG`VxifHh{?*VxYiVnkJgDT7$(6+j((G-s8tH~nYUx}5PM=}v{eP$TTKWfs3SCm6
znwEGcJ<R<wOsx5oywAA;Kg|BCG3n61TJMp}pZV}3{c1&u&rN;vdf)osTHxrCQ(>|+
zkXo_IF#aOd(aNkq*UBeC<z}^L?Njm<_2Js@$o#<9*M)~itfBa5iq+~{n{wm|^>f^B
z4Scfcc{E5uuX=jR9{GG=>K*k)#Q7p2=(-sAM(qMamaA9q!jxpFC0p+eLkA6wQUhDl
zBQ~OGX*kvf-rM?Qwh^;Vee>At==JM_NP=Y@u4%Y7s8^50MV-0bD%_O{&A+LSj>XL!
zgeDQnQe5Oq9k3PGub{sLX+N&FRQB<>_;;WoYbCti<L6pDUshX=$EAG2{?~Hse0wo^
zs8+7^LQIF(#P#ab@f6vs{^fXjbpHle5X}bz{)u0xkB+BLe~Y!*to>b(*N5<mQ<W;w
zkQ-H_N-$g-)gvm+aBoyUK@z`Fy@h1@MrE8xGkhCW=83eKc^id5O+p_;DIZWZs9eYb
z=o63*LAO-hb0S@?Qr|g|FRRoq@!Y8XhWjZs{bag)S}nu<MYR|AH`QafUsVGq(<jAl
zvI5;)O)mh++N3@{xx~oZq!yl9ViavskDPjC_X0S<ZjJ6@cEpzxOYO{7r@LKy-l;v`
zJI#t~`7~+zd$ec2_H3#FGfqCC-ZbauJ)`NL*Pj1Fd;Yoh{6^r`&I3!;6C>r}8T+>H
z_kP){{xC8(ko@j!L!JHY#lYC54-IwbeYbk{_Y)>>-?y)E4_vl2HrH6s^M$(n-}3|R
z(J7%S>0+w7_U=S=@7wW#Z~U%CnkjX1QlR)xL*ZeUeCVVq>dK;sYOK6oG)IQoa3$SH
zTNiln%JRsv5iGlJPq1Fvx{Wh$LzkKmBZU|13fZ3pM|h+t*4P6sS5cqOmwyZ_`~1&t
ze<g<guDL?Ij7>m9t`v1a+yowl%|KOdM&=fcCxJVeSL6xdL*ZSTJstLLjq|~S8l!T4
zF~o`r6fotq5W^aWfk&ASz+UnrA;y?{$-f7y23m_M_!-!97MI3JV6VoL!MV)amZC3~
z`q4a^qNG%cQjHV9mCR0qS2K4bKukGWK;tNI7xTxk$8JUoFwZDQg{!6LVXgpA^4Chy
zrzxVq{XrQ9nVkxZGdl&iGVK=Fi-1veQn;C)21m4_g=X3I%ft@}(UfH~#Ve#+7c26Y
zVUF7`M7QQZ_CDr2$lfBvpn3l!8RtI&jBb)*l+6y02W59>+vUAR{`=9u%yG-{Mb8US
z&RhkaGKBguKMtOJ0n;q=066xN5FIxA1u3GT=!Sy&up>RppTb_S7=4a;%L+6AzR)nU
zA3VK6ij3KI{_lg6F>MbrJ9ZBS62%{aJqaJE(_*ZaPKNFvhe2ktrz7By##F#?kpF0q
zy(8ByFuVf&6{}6B#+l%947Oc<t`T*aN>YFqQig3(bTEGvoZNsur*Rs%Ph+wVGd~Oe
z^cE>RbL@EUf@k0pdo`X0&H($VKqo^dI}k@BK$pf*;BMx~+k{BF4;981nexvAXFnuG
zwZ`e-Cgw)ibK5cPXq*Y|$QOPqKsOxb97Pkc!~5XO4iv~t_AJ<|3vMj1mN{`HM)3(L
z+L_;4fI-xW7tlBn+{1hi{G)o%=?n1v=?#7i#q@qD#@Jy9Jatftac0L(Lyi0|!=8R#
z3Kz3uFJ_*;N{EyZj1rAK;9BP8uqV8ZiP|3&pow`G9O5sa$%5>C%<Ztxyo70nnF^!=
zhM9Z8>7!DN1lc=Kd3u3Az@9WLg};*(&KvYIPpG8dGlm#tt^r4d8e)w30603)5H4)l
zD4@e`=EunHHAFG<>)>fwhA7oIG0X6aa#s8m4s&u1(ZsxMH3AeEqJ`NHjx9DsM-X>1
zf1m8P7^0u~Q*c6sA$o4HE10l`<^@BHEVOwcIBK2W5aX<PBL~};ZHDmR_cg6WyWtSg
zfM#86^K-;aLbSj}c1OCIor$+6$llNFOuR$79sN%Xv*IcWNWiceV=h^XwFSduoOu)2
zhfyG~NKys94)&tgyO;yuB#at2Gx?{(-=lE~ID?s9fXWxStauX{qA^Tp$MW4|A-1kV
z6J=l@qj3bdPUC2Bi^d*stHv?lc8w{22Xosxlpm8TMCWydaD%%v_JDgdP6qdBJQdup
zG36g*eiAPbgYQ42u^T-61>^laP>g<|Kqmo@X*?A?t}z90VOu~g^h+wB9ILa&Zm=ha
zGnoHK{*`EPhy75vp(u6~%;n5sw<AL}eurr623H4h9dk1I*JAnA*bQz8;&x{LmnlOX
zz6mRc-Qdn3?q=Rh{!REK8oR-LK|IKOnEbKb7}D4c9=6#p$bl52?C>~cXhp9?Gg1>1
zyTLAISS;}}Tf_D!w%5#_^)Pp$MVY^i;p^!VqLjG~_QcZ&Z!y0AYcp`l(v4ot4v)ei
z{tTK-<0x<|^M6u+K9r$x0=P?KvUh7t_CDru%6}FuLhQ#Ik|F_$;UI?*jmbX7?5o1!
z(vP>qR*YJRI121xc3!BMc@6AS$MMD*M}aHBehP3D4vE*$0_;GX0B+Kl>@6CTy`6c0
z@(V2A%vY#D50-C@qrg4Pv#YToNyG+b8OA?VfD}`q=x2v2a`0ly#oP*x9~NRn<0$Yb
z^9!&iUO<aruSoHT6TmKw$?n#e?B3;mJHrPQU<93r9T3WrTIK}&I!`Lbjz;5~!7a>H
zu+O|jidK!Mg4>xNCVMG%Jj_n~F7wqSSy8gzu+GhB9en^-7&r|R0e;I{Li$|r#P;ic
z#9{5dYo^KdVSf7k7D)?3o}Iz%6XI`p{20>~Nimr0_p_Zg=Mp^PwakLHx@6zMOxqxx
zs}YCd%`de5TbP%nTI{!Gblrg_Y~l-9b_SY|bvw<s#INElNL(2Fx_<^U7a+=+oeI=3
z+xhVk+gVY9*@C2-xr%v^`CjHx=9A1cxTyj=yp-D>ti&58T4;@xkMZc(sp}J4c6tfw
z+t)M)>dM4U0P3pL<W2xDdIGUyr=DbJ_IC5&OgT%9)ZApAo+-2P9<w@wA<8Ess3w21
zPL2)Hg}l0yn=(zt#YeHZHB2|+$j{6pb4Mttv8jr<(fpZtC(QCS^I)1x_R;4j8R9Zp
zI9Dq-j%^jfGzTc?Q(V>2368-|XP6(6c_&w?GsyfKb9y?=AspNjbz|-rb9K7RkyU0}
zx~!39=DXzlo)rr_mK%LVnHik{^Ixo*U>6+JI4_xHWL{<!g<W}&xyIZJv;2j5BturM
zu3TgXPhsy?tIX>K?%_JnK2n!HF5DHaYlZl|ndg&n#!VsSa-W>$qjig<)pAEq=3<5-
zZM}0pXC6bg_&hdu#XAN&J!THTEKAHceQ2c@%!o{x6aNlZ!HfAp7r(hW6S3ZBv)ev=
z`@-XAW*f}%i1`?T`039B=&Pa&lZGyz@O#tQk1lN-l}-qB@o}8aApNh|Ki8*w<Ifki
z9)p`dfMZ_81-pavuW_Jq?yipiOROKktftGKIS&2K*5v@}>E|sv^#ikH%CaV|JpG)}
zr4xE7!o@?ZoWkjkIR^b2(Pg#y!7Q}tR1Vh>RMnqyHWzmaC+m}}r+HMDd8`*pb*&JO
zvfdjM=N((`xAqEpmI+)TTEcb7=RmYM(&c;Hrd^n}bon3FcLwR7V?C|tLfD6~R=$V1
z09t8vY2^wP2UX~|tf!S)mqd=!VeZYAMY6j0scgAN$}BTJM=q7mns?^NxMg+794#WO
zKSohz7e|=PdN;G9|22Y=zb8olU2`Buruw%)-N`1JLhitYQw2*Lwr2tABtq2S@>un>
z`7ZEyq~&hex8kwsOV@cD9>;>%#dSnHztxVp*A><@SQm3W0M7k!8h0aSXiVRsQe&D%
z%Xwm<3R4A|G$#M@B-|i4JFp$PzfjoRuQ6p9)tCzKrcidf1*n33sTNu-Ks=%`<#)}v
zZm0Z1>C7nKs^Pe!08<8Mwxc(o43!zUL5R2G8sbd}@eW*Wo{$`-lSdL_st}zrkvL4J
zOe8pVwhN?VB@$vPkj_v@oD6hk;xJW^&PW_4e>wtjcqbm{$irdsry~xB$)64kAXBUY
z=nZmtTA%`VnD@+)$$qN%7_ZMxJ({$xLiSFLshoa|shqJOroT~;IPvIj6b@5<N6@9s
z$@#L-|LsCsh2bR{aCK|E8+=CNMlhXbk&yo$T<0}z0$<XY8fr{qdZB9?qwo5Ki(8%o
z(&&rPm>MpNnFb||#$t`>jTUQ6qq9<D8tt1k-U6=EcsmV{{hFd44y_vR0w2|wnw*Z~
zNT@=@r-QgBh|dP`pw77n@Vc%5j|A~JGqup&=G6lEs4VaOTA|GM`A2=wLC8d(oc?4%
z;xPS*!r|$7@CI?Q#x&;3gSb{>T3(uN<ldqhIbbAJ@Mxq`4P2Xb?v1@mriRWv!7I2^
zv(rIbyLD&Xp8C6XZQs_gukp^ickGUfUA&~ccjXS*W<<^{5fuv;7S<G&m@n7K6>_c_
zRWBEr)%9|INMX%f^PBZDIik4Gb}BMosF!nPvH4!TTr7*slwGnAIcj&w3iHe^`MT^j
zkK8SbB1V^^s*q~)WuRHwAT!L22I(<d8>GuDZ;-{Z)@*B#3uLP~KuMP=cOw}#%P1K!
z+w5cjNkn_C6-&HiMl>S!$}2XWF_!^jU1{`j&~+khbsUln=E+7m%jn8AUu=|LF-r4I
zV~_lb95T!H*wHB&GY60uqQEqo;N&ha7b1=5FSO&;nn#*sk>TBGz6f<>3H|RC$mLLT
J`EEJwe*x~SzjOcq

delta 9292
zcmchce^^x4na9t$fHEj{P>=x>2#EX;bOaTQ8V5BxDp8CY!5Bqj6%pd_kS(M!ow04U
zXp_yDqq+2{+29k`lC9lnr&YI48Znz~h)-&9^P?ou6pc@oJZ8Ig)h>xX>we#R-z&$-
zU)`tAzRz>#+|T>I=RNN|_ndRjz0-9$uIo}<xKM6CRuqmgYU9;wF|Qky@sXXelckXn
zA2||tSjx{LD~Ing<hjWEt{VwceS&1GAw)dNW;xg5<)f_vJkL7WD%l=Wsct4`6)v!~
zPOX^vcCAvb6?4CJ(j2=`-OQP*zMJAvKTjDgz3QplR9T=dq@>Dh^|Rd6au57kvh6lb
zaht7(>bCTiR+JXEol`64(Bk$*CXHP)^8X?AHGkc-71EB}J7HO@I+~Vl443Li!TQRZ
zVmdCfIjPLL*c3TJB;jne92CP)K5?+?HW^anpQ#Y1##n_I9wS6DPD^sHsilQ^lj1~z
zWf=1R!eZT@Zg5HN=j!E>ykU7UmxVCYV}<kXJu%$!6ivfFvQD<Wa>i<MTUU=&J`HUg
zjwcfaEk2Jpbbq$*Q3*wJW6W=gNLA4%h7k~|xMV>>oY-oGIW;`;;QaqKlJ@+{s+E;$
zX~mP@R%;hdR{bSK#veo^d2(J%C0kmNhczAow&D~4q?Oxi35~V*RGL+YR+l{{Tf*ww
zQ_Ir=->}pzp;30}9%+|hb!KYy|6!~wEuHcg4)aT;f8}AWepvQ^8Yufpok<&|u1+hG
zy^)ORaZ(k`I2zPvO9ig9rD&Pe&$`}g=^yx-zQEE~eNCTj>6d;@Z{3xmCAvOG+?l3D
zi!DP-`XZ~mGfmZpGgina)ui%fxl6rRK3#56@0RDwjggz>H)2OLAGGsrafc#TW<MP#
zH>&1&W7Oq&vop3Gv{P$we+LO+0Nk1QL6tE-PxUSwANl3NzloD`Ba^C@8}dfv$z{Kb
zl@F_>D_@ass~am{G)kp9zj}70ch#9;t`%006j7~Set3#pqTa>tf=JA|UrN>eNP|2c
znY4bJ;p#3If{sIx7whI4a*?{Qsnr;i>Y+!!6^FSNJ5rr{G(Qr%`A~`R!AkXydnZr#
ztP)~8Qd@;16GsLZGBOM2EJhB_zqQ(;_*|R^RpRrhO?#jj2c-`O)us^}!m%Iv*(kel
z9AF;-dmRp16nrQ<p(p=pod1N+$$pIeLpUdi6(W(!U#q>(rzV_%^&VKxu2w&PK1V*G
z-hVzn>ASV$AVw9!K(+R&M3sNf0oInV_8+3WUWHexYE<Klf2mb_RJw7dRvlIojeo0E
zXHk4ytNx7Q(^{3eZ=!LfRxR8&G4C2;U{#OZg;qXCTzhJw)wM#TL)QzPOYPm4FO$?i
z?<<pO>Oc17yS%VMMpdcP&yG>v{Uc?KnzKLO)x`R0OCN&%`|4Tff6V$-mcAGI6Y9eL
z{L#N>eGOV6`QutO_JxJUwY6$JiZ9oy!!MkXQZ<{YX|9JY4{JqC)y@mmK{GY4RMV7e
z=at%dt-4^Q%FXJAIV*36rf=2G|5iJHR-H3bBaI!6i_{M<T~hD;p-ScV&xow=FEP}t
z50aGk;#l>c@29AjF2<{-3&aT#-xZ%!Q{K#tJoD*ULk;^)Y2=O1Qez{bFD?y_d$SPZ
zL~Xr3-&MU(h-_SPwu)TOHwIQl&R<`WP}zs4?1d55Ra!q+nKw@nVnnhO9z0;k{wmnz
zk;1F72aMRaXUWeaFW<iA4*Ic@G|Uj<Z9MN?UMcFLxE?$Jn}JkDA$UOJ(cm!i(y2le
zx~1sQ?D?>FYFq~H*4ULSgQABORcK&rCkB$nao~RDR@i5DAsOZq<bMRu5A+r#_&;FJ
zNj%py9uM|tJO=D#-n<C$dV)e!u;LIDW8cA4W&U^Ym_8u_%%l8xhW886rg0KD#JmLd
z;tDC+HJ%9$Yn%@5WELc7Uv#nJ?+_r-Cq+*b_cHfU0;{CxV>T8eVJss3%theQHBt;{
zoCv<k?D!8dJMD{tBD)Kn1}d1BBVb}31`P9Vuxlp<=Oo+zx5ObVXvH>DK$2eOq$OA+
z148sg*$0?sFTwSXdt8XYC<jqu2i%GPN%a`fQCz@mH;06nkC1;O1}XCmu&W-oaIzh5
z=2CDY62#1)F=O{Xm3YpQ!pS(EnM@=eW@Kz7To7gVGCzd|(sxSXXFd%c9g?D&`BQM=
z_ob*|9uus>?0yE*juo@O<J+aE*DB<rLO|mjaERGXPl$Hrji{d#mZA$x)A|5-+5(Iz
z=38KwUy5GlVCDmOtW-&njrmIz7J#!bsJfXQySvo3?|^+g#zdIe@$ZbXcWd^1#Ou+R
z;`iDd6i&eYD2MhkyTQX~(2G$Y*0>1ln>LgX4N^bzMe^T_X~>+j3>Snk(WUW3@KK8~
z{~U*2c36fA`E63Tr`rvLz!L%(gc@gpvzZ<Lu*ONK-=T3LxRd!6#G6QC1ijr5#LtIN
zl;ECLlY*J<c|CLDa$FI{L_p&ra69uN*h?{n!WtKYeb@^*@hHBZ`DyqkhY=4PB!`dY
zVxI3qKz1M=2kv101QimG;GQw3R%6V(hJ}cECOG3wEJRWE0p=Rm^LwxmMcK0}F#jom
zJ#ff5FGWFxoiVWo>}QUE(|gfF%uWI|%<saU)`wXXW$$GE6YP2Y7z4~s{O$_ee@Y;G
z1v0#hQ5xkCm}%Qr!an{zDcYEw1bp|}_QzpQ9>gtU?g1y>LKidlgOidC(H_O&AS;Xq
z;ovdEN#;4=%n63*)_5Gahq(^+(gH(VW&SPIFE+#=^8h%-YY6u&J3)s%%%fJqKFtt8
zA1k&%k-oqXUY}jzd*CcT7>`xzp`U^is|?|1et!z~e(MZDTa=fw(7mf*FA$<eV;8ti
z<0NoEV^0C@f19RAhC@hW3ee6x9}OgXg$Qfx26t#o%XF8<S>U4@XMj&??DpdRce7#}
zHGsW)kH&6ruf`s5zs6bM0gW@jS2d>k0{aN+Aw}{1*sy4f{TFsDx&oZd{4=UhEkuFF
zZm>6seavr>e~l1+josktD6V6^2>)Pmoe=e!!VL~YaftagHBgURqOltsj^a+{%+>G@
z;Ff6Y1|J>bpddvzE9OvzHrxV@-QeCR?q^;{{vqriG<JgpdXc)^5f8I9XrDn3Gk>%i
z_g{3NOIdLMU&TC~*b_1rJ%p9;5H=XhXD8r8N*6{o^9tD0et{m-I1${&`~#|g5<R4G
zI=I8(AUkwA3NSewW&Rb}Uqg>*oDS~QnCyKTlYM~s3hL){qlYw31iP_yqaF%6SL9_y
z@*1q=gScXi6TyDwWw4LCg&xp29bB(5*#jDrJ;eMysxR=cvN<S@Q-dBn9@&975!}Um
z6+B@ap4S>@fKM`~)xe&OrJH#kIIRyoqH!X)pScb8ap%z^7UTYtA{`2Wy&ZLl;}EYg
z**(lZr2zdHM9ipZNe%OP*vD7kS)lPKaDX`tZ_;_Q@hl-OMuVitfFi^Wi^;)<$1$_h
zK!>>~Q&!Dv#HtPzEy~})5eFW?;*6JbOGy7;;E|yrKjOI1iFY#PLvcZRV@tqG<-)0U
zh4?}tzQpNQShq;%{YS#ypKYP_K12Rbu|MtXh_|qvb^$t9BM!xzh5ZgmfO&DQg+XgY
z*BxlZCO%(mIamv_Zl?v8_&F>;mSDE){@KjjfbcOp3Dhy$^>N2TthmVmJDJn4oRD-g
zS1|W8uVJRyO$lttCU1MP64#Ej(3&e>;ncCy*eAB^kKlyHHs-_~2O7)7P5>IKbPJpS
zH1voaI}Ig6v(v~St{tf^ZpbkwOq9h_cUuF(5WX=8tjRn06h@<^6aKnXn7by*)U+F1
zEfl94@iD<XM&`CyQX3-dy4(Djc@bv$Pv(~sWmX{#0TOK4EUDvKA?_esi`B=h%tz24
zahn4p9D`jZo6Tfi&KY+^nNOJq$^0>!J&AYMjy2Ea%PDfMDGTHVd5^iV0M7qvIpYQF
zZeKCg+)L(9tW2<zjq04k=4mn)TGxSnW|Vo6`6rlFUCA&LpW+@|;h%4Z|B71+S>;fZ
zlH>TfpBzgUHy=OT(b(nh%wvTz)%c@fo+*@>h4lC$!3?(~z~OomY<7NsVkQ+K>m)XJ
zra1<?++|k6EYr-|BJ|S>=57>ezu^?Ju}bK&)jUVB&a&B^sT*l{$VrIxgqb!;P6^&(
zuTJmXUhi^$&^I4lUT1%Ap{~Vdk~61IEV^vqIQ1pER){sWzD)FBP15Bh4n!}7y0}>H
zpJC1`mJ`#Cb0V}2*Ck}`D#q1Uvpa2?b(v}&E5>DC<FwkNZtLH(UhsW$sy@eh+JWj)
z#QMP~eJkrdQE^_k_1H^c-O%Mzu0Ri4U2<7Z+ZbK;^5u76J<;U@)`z3?2U$<gULhVH
zs<ML{pl6~k_1uBpsD$2PJv~!(8Od?l&6$&BxvW0XJX!9La-4Z_id>XtqE?b{-Kh}I
zXMVHNi@S9NmB~y`OA^O?+-!zf{=nSrmAS#Suyj~<tg$HRDvt8}cKD=qowj`)>>evE
zn>T<56Yv8e|2iD}N0!AK!B@Y59|+lr<2fa8&{~STLkd9;nfhe>K&S%tKlsi^KSNxg
zF)d})8dH5gPj#okfX3wSACDi1MEh1oU3U~VcWX=)1~jGyvU8~VP(mkj@8*7useb%~
zAv@LY&1XjYRsw^L0!$U0^@py&x}pM{K!`Wd2~U0EM{&?6KoW<&y!1FsAINn3QRW~y
zP#4qJ5fX>#>xjdY5Pb}Bm=dB_e}}0)z3Mwm{$Y*DpWfU_DE?*~^rj9OYbmG#y_%Dd
z!)kL*nam1O+^hV|ypxwURLI_;F@@>YnA*J>&7+}&IPvJ;0*9%-BN)==$7OPQkiKh?
z&=lQ<<ABBu;4Y1~gMXoMBe+}RCUBp|)Df38wk}xXjWj`SX$qQs@z~*#P(pO;vzcRX
zPP4ICW4fXWjqAV*G^W{3-`z;4{#qRCG~PrLgg(TPki!-nk88XY9MX6-_?al~h~h(0
zd^Cz*)7guFJ-Pz?UKD@9Og&O>{(8E6PTqgwff=%_Fi0Q&Nyu~$ofOf}5PLMHIZgis
zkdQwyefuXNrZ48zQQWAp0sGFo`NZuF^0YC270*tJLIZEJ&L=KxlDV;CAF12?&BiSo
zwr<+EZO8WY^^Z2Brc}<q|HO=~a+hJgwN2h{CO630G1E89Fqbw+pQ##Tx~qJ;sG2vA
zbjKUy4D)(}oMX=1E+@MxN^L{AS-)LYS+!o>E<co==I%yW?&@EHEFjh9+d%0xWs{uy
zLX#{o>zky<^fk$Nv%N`H$bfko78y3>V<>veN-BEIU3PIAg{!U33MF=$t{n({{hE#Y
z%*DWz_B^^^w3J}0Q&Bu*?%yFN8GTdCH+IPTjJ8tK2*~@;WMu%+J?1Vd3e3|~RFHCv
tncOUk4S$(AuUX#b8k}aw^qISxWw}wY#e4(mgcVzC_3vZNC6CF>{{`F9v<(0N

diff --git a/pkg/exporter/proto.go b/pkg/exporter/proto.go
index b8d47be2f..800971dc6 100644
--- a/pkg/exporter/proto.go
+++ b/pkg/exporter/proto.go
@@ -79,6 +79,7 @@ func v4FlowToPB(fr *flow.Record) *pbflow.Record {
 		PktDropLatestDropCause: fr.Metrics.PktDrops.LatestDropCause,
 		DnsId:                  uint32(fr.Metrics.DnsRecord.Id),
 		DnsFlags:               uint32(fr.Metrics.DnsRecord.Flags),
+		DnsErrno:               uint32(fr.Metrics.DnsRecord.Errno),
 		TimeFlowRtt:            durationpb.New(fr.TimeFlowRtt),
 	}
 	if fr.Metrics.DnsRecord.Latency != 0 {
@@ -128,6 +129,7 @@ func v6FlowToPB(fr *flow.Record) *pbflow.Record {
 		PktDropLatestDropCause: fr.Metrics.PktDrops.LatestDropCause,
 		DnsId:                  uint32(fr.Metrics.DnsRecord.Id),
 		DnsFlags:               uint32(fr.Metrics.DnsRecord.Flags),
+		DnsErrno:               uint32(fr.Metrics.DnsRecord.Errno),
 		TimeFlowRtt:            durationpb.New(fr.TimeFlowRtt),
 	}
 	if fr.Metrics.DnsRecord.Latency != 0 {
diff --git a/pkg/flow/record.go b/pkg/flow/record.go
index 54461c602..cd5b3c2b6 100644
--- a/pkg/flow/record.go
+++ b/pkg/flow/record.go
@@ -115,6 +115,10 @@ func Accumulate(r *ebpf.BpfFlowMetrics, src *ebpf.BpfFlowMetrics) {
 	if src.Dscp != 0 {
 		r.Dscp = src.Dscp
 	}
+	// Accumulate DNSErrno
+	if src.DnsRecord.Errno != 0 {
+		r.DnsRecord.Errno = src.DnsRecord.Errno
+	}
 }
 
 // IP returns the net.IP equivalent object
diff --git a/pkg/flow/record_test.go b/pkg/flow/record_test.go
index 8709af0b6..316bbe699 100644
--- a/pkg/flow/record_test.go
+++ b/pkg/flow/record_test.go
@@ -43,6 +43,7 @@ func TestRecordBinaryEncoding(t *testing.T) {
 		01, 00, // id
 		0x80, 00, // flags
 		0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, // latency
+		0x00, // errno
 		// u64 flow_rtt
 		0xad, 0xde, 0xef, 0xbe, 0xef, 0xbe, 0xad, 0xde,
 	}))
@@ -82,6 +83,7 @@ func TestRecordBinaryEncoding(t *testing.T) {
 				Id:      0x0001,
 				Flags:   0x0080,
 				Latency: 0x1817161514131211,
+				Errno:   0,
 			},
 			FlowRtt: 0xdeadbeefbeefdead,
 		},
diff --git a/pkg/pbflow/flow.pb.go b/pkg/pbflow/flow.pb.go
index 16ad2116c..a0ed4ddcd 100644
--- a/pkg/pbflow/flow.pb.go
+++ b/pkg/pbflow/flow.pb.go
@@ -191,6 +191,7 @@ type Record struct {
 	DnsFlags               uint32               `protobuf:"varint,22,opt,name=dns_flags,json=dnsFlags,proto3" json:"dns_flags,omitempty"`
 	DnsLatency             *durationpb.Duration `protobuf:"bytes,23,opt,name=dns_latency,json=dnsLatency,proto3" json:"dns_latency,omitempty"`
 	TimeFlowRtt            *durationpb.Duration `protobuf:"bytes,24,opt,name=time_flow_rtt,json=timeFlowRtt,proto3" json:"time_flow_rtt,omitempty"`
+	DnsErrno               uint32               `protobuf:"varint,25,opt,name=dns_errno,json=dnsErrno,proto3" json:"dns_errno,omitempty"`
 }
 
 func (x *Record) Reset() {
@@ -393,6 +394,13 @@ func (x *Record) GetTimeFlowRtt() *durationpb.Duration {
 	return nil
 }
 
+func (x *Record) GetDnsErrno() uint32 {
+	if x != nil {
+		return x.DnsErrno
+	}
+	return 0
+}
+
 type DataLink struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
@@ -670,7 +678,7 @@ var file_proto_flow_proto_rawDesc = []byte{
 	0x07, 0x52, 0x65, 0x63, 0x6f, 0x72, 0x64, 0x73, 0x12, 0x28, 0x0a, 0x07, 0x65, 0x6e, 0x74, 0x72,
 	0x69, 0x65, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x0e, 0x2e, 0x70, 0x62, 0x66, 0x6c,
 	0x6f, 0x77, 0x2e, 0x52, 0x65, 0x63, 0x6f, 0x72, 0x64, 0x52, 0x07, 0x65, 0x6e, 0x74, 0x72, 0x69,
-	0x65, 0x73, 0x22, 0xef, 0x07, 0x0a, 0x06, 0x52, 0x65, 0x63, 0x6f, 0x72, 0x64, 0x12, 0x21, 0x0a,
+	0x65, 0x73, 0x22, 0x8c, 0x08, 0x0a, 0x06, 0x52, 0x65, 0x63, 0x6f, 0x72, 0x64, 0x12, 0x21, 0x0a,
 	0x0c, 0x65, 0x74, 0x68, 0x5f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x18, 0x01, 0x20,
 	0x01, 0x28, 0x0d, 0x52, 0x0b, 0x65, 0x74, 0x68, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c,
 	0x12, 0x2f, 0x0a, 0x09, 0x64, 0x69, 0x72, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20,
@@ -733,35 +741,37 @@ var file_proto_flow_proto_rawDesc = []byte{
 	0x6f, 0x77, 0x5f, 0x72, 0x74, 0x74, 0x18, 0x18, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67,
 	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44,
 	0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0b, 0x74, 0x69, 0x6d, 0x65, 0x46, 0x6c, 0x6f,
-	0x77, 0x52, 0x74, 0x74, 0x22, 0x3c, 0x0a, 0x08, 0x44, 0x61, 0x74, 0x61, 0x4c, 0x69, 0x6e, 0x6b,
-	0x12, 0x17, 0x0a, 0x07, 0x73, 0x72, 0x63, 0x5f, 0x6d, 0x61, 0x63, 0x18, 0x01, 0x20, 0x01, 0x28,
-	0x04, 0x52, 0x06, 0x73, 0x72, 0x63, 0x4d, 0x61, 0x63, 0x12, 0x17, 0x0a, 0x07, 0x64, 0x73, 0x74,
-	0x5f, 0x6d, 0x61, 0x63, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52, 0x06, 0x64, 0x73, 0x74, 0x4d,
-	0x61, 0x63, 0x22, 0x6b, 0x0a, 0x07, 0x4e, 0x65, 0x74, 0x77, 0x6f, 0x72, 0x6b, 0x12, 0x25, 0x0a,
-	0x08, 0x73, 0x72, 0x63, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32,
-	0x0a, 0x2e, 0x70, 0x62, 0x66, 0x6c, 0x6f, 0x77, 0x2e, 0x49, 0x50, 0x52, 0x07, 0x73, 0x72, 0x63,
-	0x41, 0x64, 0x64, 0x72, 0x12, 0x25, 0x0a, 0x08, 0x64, 0x73, 0x74, 0x5f, 0x61, 0x64, 0x64, 0x72,
-	0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x0a, 0x2e, 0x70, 0x62, 0x66, 0x6c, 0x6f, 0x77, 0x2e,
-	0x49, 0x50, 0x52, 0x07, 0x64, 0x73, 0x74, 0x41, 0x64, 0x64, 0x72, 0x12, 0x12, 0x0a, 0x04, 0x64,
-	0x73, 0x63, 0x70, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x04, 0x64, 0x73, 0x63, 0x70, 0x22,
-	0x3d, 0x0a, 0x02, 0x49, 0x50, 0x12, 0x14, 0x0a, 0x04, 0x69, 0x70, 0x76, 0x34, 0x18, 0x01, 0x20,
-	0x01, 0x28, 0x07, 0x48, 0x00, 0x52, 0x04, 0x69, 0x70, 0x76, 0x34, 0x12, 0x14, 0x0a, 0x04, 0x69,
-	0x70, 0x76, 0x36, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0c, 0x48, 0x00, 0x52, 0x04, 0x69, 0x70, 0x76,
-	0x36, 0x42, 0x0b, 0x0a, 0x09, 0x69, 0x70, 0x5f, 0x66, 0x61, 0x6d, 0x69, 0x6c, 0x79, 0x22, 0x5d,
-	0x0a, 0x09, 0x54, 0x72, 0x61, 0x6e, 0x73, 0x70, 0x6f, 0x72, 0x74, 0x12, 0x19, 0x0a, 0x08, 0x73,
-	0x72, 0x63, 0x5f, 0x70, 0x6f, 0x72, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x07, 0x73,
-	0x72, 0x63, 0x50, 0x6f, 0x72, 0x74, 0x12, 0x19, 0x0a, 0x08, 0x64, 0x73, 0x74, 0x5f, 0x70, 0x6f,
-	0x72, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x07, 0x64, 0x73, 0x74, 0x50, 0x6f, 0x72,
-	0x74, 0x12, 0x1a, 0x0a, 0x08, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x18, 0x03, 0x20,
-	0x01, 0x28, 0x0d, 0x52, 0x08, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x2a, 0x24, 0x0a,
-	0x09, 0x44, 0x69, 0x72, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x0b, 0x0a, 0x07, 0x49, 0x4e,
-	0x47, 0x52, 0x45, 0x53, 0x53, 0x10, 0x00, 0x12, 0x0a, 0x0a, 0x06, 0x45, 0x47, 0x52, 0x45, 0x53,
-	0x53, 0x10, 0x01, 0x32, 0x3e, 0x0a, 0x09, 0x43, 0x6f, 0x6c, 0x6c, 0x65, 0x63, 0x74, 0x6f, 0x72,
-	0x12, 0x31, 0x0a, 0x04, 0x53, 0x65, 0x6e, 0x64, 0x12, 0x0f, 0x2e, 0x70, 0x62, 0x66, 0x6c, 0x6f,
-	0x77, 0x2e, 0x52, 0x65, 0x63, 0x6f, 0x72, 0x64, 0x73, 0x1a, 0x16, 0x2e, 0x70, 0x62, 0x66, 0x6c,
-	0x6f, 0x77, 0x2e, 0x43, 0x6f, 0x6c, 0x6c, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x52, 0x65, 0x70, 0x6c,
-	0x79, 0x22, 0x00, 0x42, 0x0a, 0x5a, 0x08, 0x2e, 0x2f, 0x70, 0x62, 0x66, 0x6c, 0x6f, 0x77, 0x62,
-	0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x77, 0x52, 0x74, 0x74, 0x12, 0x1b, 0x0a, 0x09, 0x64, 0x6e, 0x73, 0x5f, 0x65, 0x72, 0x72, 0x6e,
+	0x6f, 0x18, 0x19, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x08, 0x64, 0x6e, 0x73, 0x45, 0x72, 0x72, 0x6e,
+	0x6f, 0x22, 0x3c, 0x0a, 0x08, 0x44, 0x61, 0x74, 0x61, 0x4c, 0x69, 0x6e, 0x6b, 0x12, 0x17, 0x0a,
+	0x07, 0x73, 0x72, 0x63, 0x5f, 0x6d, 0x61, 0x63, 0x18, 0x01, 0x20, 0x01, 0x28, 0x04, 0x52, 0x06,
+	0x73, 0x72, 0x63, 0x4d, 0x61, 0x63, 0x12, 0x17, 0x0a, 0x07, 0x64, 0x73, 0x74, 0x5f, 0x6d, 0x61,
+	0x63, 0x18, 0x02, 0x20, 0x01, 0x28, 0x04, 0x52, 0x06, 0x64, 0x73, 0x74, 0x4d, 0x61, 0x63, 0x22,
+	0x6b, 0x0a, 0x07, 0x4e, 0x65, 0x74, 0x77, 0x6f, 0x72, 0x6b, 0x12, 0x25, 0x0a, 0x08, 0x73, 0x72,
+	0x63, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x0a, 0x2e, 0x70,
+	0x62, 0x66, 0x6c, 0x6f, 0x77, 0x2e, 0x49, 0x50, 0x52, 0x07, 0x73, 0x72, 0x63, 0x41, 0x64, 0x64,
+	0x72, 0x12, 0x25, 0x0a, 0x08, 0x64, 0x73, 0x74, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x18, 0x02, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x0a, 0x2e, 0x70, 0x62, 0x66, 0x6c, 0x6f, 0x77, 0x2e, 0x49, 0x50, 0x52,
+	0x07, 0x64, 0x73, 0x74, 0x41, 0x64, 0x64, 0x72, 0x12, 0x12, 0x0a, 0x04, 0x64, 0x73, 0x63, 0x70,
+	0x18, 0x03, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x04, 0x64, 0x73, 0x63, 0x70, 0x22, 0x3d, 0x0a, 0x02,
+	0x49, 0x50, 0x12, 0x14, 0x0a, 0x04, 0x69, 0x70, 0x76, 0x34, 0x18, 0x01, 0x20, 0x01, 0x28, 0x07,
+	0x48, 0x00, 0x52, 0x04, 0x69, 0x70, 0x76, 0x34, 0x12, 0x14, 0x0a, 0x04, 0x69, 0x70, 0x76, 0x36,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x0c, 0x48, 0x00, 0x52, 0x04, 0x69, 0x70, 0x76, 0x36, 0x42, 0x0b,
+	0x0a, 0x09, 0x69, 0x70, 0x5f, 0x66, 0x61, 0x6d, 0x69, 0x6c, 0x79, 0x22, 0x5d, 0x0a, 0x09, 0x54,
+	0x72, 0x61, 0x6e, 0x73, 0x70, 0x6f, 0x72, 0x74, 0x12, 0x19, 0x0a, 0x08, 0x73, 0x72, 0x63, 0x5f,
+	0x70, 0x6f, 0x72, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x07, 0x73, 0x72, 0x63, 0x50,
+	0x6f, 0x72, 0x74, 0x12, 0x19, 0x0a, 0x08, 0x64, 0x73, 0x74, 0x5f, 0x70, 0x6f, 0x72, 0x74, 0x18,
+	0x02, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x07, 0x64, 0x73, 0x74, 0x50, 0x6f, 0x72, 0x74, 0x12, 0x1a,
+	0x0a, 0x08, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0d,
+	0x52, 0x08, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x2a, 0x24, 0x0a, 0x09, 0x44, 0x69,
+	0x72, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x0b, 0x0a, 0x07, 0x49, 0x4e, 0x47, 0x52, 0x45,
+	0x53, 0x53, 0x10, 0x00, 0x12, 0x0a, 0x0a, 0x06, 0x45, 0x47, 0x52, 0x45, 0x53, 0x53, 0x10, 0x01,
+	0x32, 0x3e, 0x0a, 0x09, 0x43, 0x6f, 0x6c, 0x6c, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x12, 0x31, 0x0a,
+	0x04, 0x53, 0x65, 0x6e, 0x64, 0x12, 0x0f, 0x2e, 0x70, 0x62, 0x66, 0x6c, 0x6f, 0x77, 0x2e, 0x52,
+	0x65, 0x63, 0x6f, 0x72, 0x64, 0x73, 0x1a, 0x16, 0x2e, 0x70, 0x62, 0x66, 0x6c, 0x6f, 0x77, 0x2e,
+	0x43, 0x6f, 0x6c, 0x6c, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x52, 0x65, 0x70, 0x6c, 0x79, 0x22, 0x00,
+	0x42, 0x0a, 0x5a, 0x08, 0x2e, 0x2f, 0x70, 0x62, 0x66, 0x6c, 0x6f, 0x77, 0x62, 0x06, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/proto/flow.proto b/proto/flow.proto
index 35803d7d6..bf3209caf 100644
--- a/proto/flow.proto
+++ b/proto/flow.proto
@@ -53,6 +53,7 @@ message Record {
   uint32 dns_flags = 22;
   google.protobuf.Duration dns_latency = 23;
   google.protobuf.Duration time_flow_rtt = 24;
+  uint32 dns_errno = 25;
 }
 
 message DataLink {