PacketBeat DNS protocol wrong registered_domain when uppercase

I'm monitoring my powerdns with packetbeat and elasticsearch.

When domain query with all lowercase, everything is fine.

ex) dig :
dns.question.registered_domain :
dns.question.subdomain : sub

but when top level domain has uppercase, couldn't get exact registered domain

ex) dig :
dns.question.registered_domain : co.KR
dns.question.subdomain : sub.example

DNS Answer doesn't care whether domain uppercase or lowercase

and I found that registered domain uses list of public suffix list
( View the Public Suffix List )

Is it possible to get exact registered_domain with uppercase top level domain?

Thank you

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.