Fast, lightweight, easy-to-extend, easy-to-test, pure JavaScript (ES5.1) implementation for DNS / mDNS.
AJ ONeal 092008f766 update 1 year ago
bin note if data is truncated 1 year ago
examples Add new file 1 year ago
packer add CAA packer, expand CCA parser 1 year ago
parser add CAA packer, expand CCA parser 1 year ago
samples finished PTR parser 2 years ago
test document types and rename some fixtures 1 year ago
.gitignore ignore generated json files 2 years ago
.gitmodules reorganzing 2 years ago
CHANGELOG add standard files 1 year ago
LICENSE add standard files 1 year ago update docs 2 years ago update 1 year ago
browser.js started browser code 2 years ago
demo.css started fixing format to match native dns. Spotted bug in unpacking labels. Not fixed yet 2 years ago
demo.html more dir restructure updates 2 years ago
dns.classes.js in reverse also 2 years ago
dns.js limited how often we log about unsupported features 1 year ago
dns.opcodes.js add OPCODES 1 year ago
dns.packer.js allow empty string in query 1 year ago
dns.parser.js limited how often we log about unsupported features 1 year ago
dns.rcodes.js add RCODES 1 year ago
dns.rdata.pack.js dir for packer 2 years ago
dns.rdata.parse.js load parsers correctly 2 years ago
dns.type.any.js clean up 2 years ago
dns.types.js prefer forEach to for 1 year ago
dns.unpack-labels.js disallow forward compression pointers 1 year ago renamed some files and added objective statement and purpose of document 2 years ago
package.json update 1 year ago
parse-binary-test.js added the test code that AJ wrote 2 years ago


| dns-suite.js | dig.js | mdig.js | digd.js | Sponsored by ppl.

Fast, lightweight, and easy-to-extend pure JavaScript (ES5.1) implementation for DNS / mDNS.

Works great in Web Browsers and in node.js!

Detailed error checking makes it great for

  • capture
  • packing (JSON to DNS/mDNS)
  • parsing (DNS/mDNS to JSON)
  • linting (finding errors in packets)
  • debugging

No external dependencies for node.js or modern browsers. Uses DataView, Uint8Array, Uint16Array, and ArrayBuffer

Similar API to dns.js and native-dns-packet.

{ "header": {
    "id": 5423
  , "qr": 0
  , "opcode": 0
  , "aa": 0
  , "tc": 0
  , "rd": 1
  , "ra": 0
  , "res1": 0
  , "res2": 0
  , "res3": 0
  , "rcode": 0
, "question": [
    { "name": "bowie._sftp-ssh._tcp.local"
    , "type": 1
    , "typeName": "A"
    , "class": 1
    , "className": "IN"
    , "byteLength": 32
, "answer": []
, "authority": []
, "additional": []
, "edns_options": []
, "byteLength": 44

Install with git

You can use git to install v1.x like so:

# latest of v1.x
npm install 'git+'

If you want to be more specific to v1.0.x or exactly v1.0.2 you can do so like this:

# latest of v1.0.x
npm install 'git+'

# exactly v1.0.2
npm install 'git+'

Install without git

Don’t have git? Well you can also bow down to the gods of the centralized, monopolized, concentrated, dictatornet (as we like to call it here at ppl Labs), if that’s how you roll:

npm install --save dns-suite


pushd node_modules/dns-suite

npm test


  • CLI
  • API

CLI Usage

When installed globally you can use these commands:

dns-parse.js </path/to/packet.dns.bin> [out.json]   # parses a saved DNS packet to JSON
dns-pack.js </path/to/packet.dns.json> [out.bin]    # packs a JSON DNS packet to binary
dns-test.js </path/to/packet.dns(.json|.bin)>       # convert a packet back and forth to test reciprocity of the packer and parser

For capturing packets you should use dig.js with the --output option. It can capture mDNS as well. See

You can also access them directly from node_modules/dns-suite in a project:

node node_modules/dns-suite/bin/dns-parse.js node_modules/dns-suite/samples/a-0.mdns.bin

Library API

  • DNSPacket.parse(nodeOrArrayBuffer) returns json (as shown above)
  • DNSPacket.pack(packet) returns ArrayBuffer (browser and node)
  • DNSPacket.write(packet) returns NodeBuffer (node only)


var nodeBuffer = fs.readFileSync('./samples/a-0.mdns.bin');
var arrayBuffer = nodeBuffer.buffer;

var DNSPacket = require('dns-suite').DNSPacket;
var packet = DNSPacket.parse(arrayBuffer);
var ab = DNSPacket.pack(packet);

console.log(new Uint8Array(ab));


var arrayBuffer = new Uint8Array.from([ /* bytes */ ]).buffer;

var packet = DNSPacket.parse(arrayBuffer);
var ab = DNSPacket.pack(packet);

console.log(new Uint8Array(ab));

Capturing Packets

We have a command line tool for that! See dig.js.

# Install
npm install -g 'git+'

# Use with DNS
dig.js A --output .

# Use with mDNS
dig.js --mdns PTR _services._dns-sd._udp.local --output .

Resource Record Examples

  • SOA
  • NS
  • A
  • AAAA
  • MX
  • TXT
  • SRV
  • PTR


I’m pretty sure that the SOA only goes in the authority section (except when SOA is queried explicitly) and that it’s only given as a response to any empty set (where RCODE == NXDOMAIN) to affirm “yes, I am responsible for this domain but, no, I don’t have a record for it”.

If another nameserver has been delegated authority for a particular subdomain a set of NS records should be returned instead.

  "name": "",
  "type": 6,
  "typeName": "SOA",
  "class": 1,
  "className": "IN",
  "ttl": 599,
  "primary": "",
  "admin": "",
  "serial": 2017092539,
  "refresh": 3600,
  "retry": 300,
  "expiration": 1814400,
  "minimum": 600


I’m also pretty sure that the NS only goes in the authority section (except when NS is queried explicitly) and that it’s given as a successful response (RCODE == SUCCESS) to any query type (A or AAAA, MX, TXT, or SRV) where the answer sections is an empty set because the records in question have been delegated to another nameserver.

  "name": "",
  "type": 2,
  "typeName": "NS",
  "class": 1,
  "className": "IN",
  "ttl": 82790,
  "data": ""


The most common type of record. Returns the IPv4 address for a given domain.

  "name": "",
  "type": 1,
  "typeName": "A",
  "class": 1,
  "className": "IN",
  "ttl": 291,
  "address": ""


Returns the IPv6 address for a given domain.

  "name": "",
  "type": 28,
  "typeName": "AAAA",
  "class": 1,
  "className": "IN",
  "ttl": 59,
  "address": "2607:f8f0:610:4000:211:11ff:fe1c:7bec"


The CNAME is used to look up the IP address for the given alias. (the alias is often referred to incorrectly as a CNAME but it is, in fact, the alias)

  "name": "",
  "type": 5,
  "typeName": "CNAME",
  "class": 1,
  "className": "IN",
  "ttl": 3600,
  "data": ""


Mail Exchange Records show the alias that should be looked up to know where incoming mail should be sent.

  "name": "",
  "type": 15,
  "typeName": "MX",
  "class": 1,
  "className": "IN",
  "ttl": 197,
  "priority": 10,
  "exchange": ""


Often used for outgoing mail validations, public keys, lots of arbitrary stuff.

  "name": "",
  "type": 16,
  "typeName": "TXT",
  "class": 1,
  "className": "IN",
  "ttl": 1926,
  "data": [ "v=spf1 ?all" ]


A way to associate a service with a port and other relevant information. Used for federated / dencentralized protocols (like XMPP) and mDNS/DLNA/UPnP/DNS-SD type stuff.

  "name": "",
  "type": 33,
  "typeName": "SRV",
  "class": 1,
  "className": "IN",
  "ttl": 900,
  "priority": 5,
  "weight": 0,
  "port": 5269,
  "target": ""


Used for mDNS/DNS-SD type discoveries and anti-spam reverse lookup verification for mail servers.

  "name": "_pdl-datastream._tcp.local",
  "type": 12,
  "typeName": "PTR",
  "class": 1,
  "className": "IN",
  "ttl": 255,
  "data": "Canon MF620C Series._pdl-datastream._tcp.local"

All Properties

For simplicity, here’s a list of all properties, just for fun:

  // All RRs
  "name": "",
  "type": 1,
  "typeName": "A",
  "class": 1,
  "className": "IN",
  "ttl": 600,

  // SOA
  "primary": "",
  "admin": "",
  "serial": 2017092539,
  "refresh": 3600,
  "retry": 300,
  "expiration": 1814400,
  "minimum": 600,

  // A, AAAA
  "address": "",

  "data": "",

  // TXT
  // "data": [ "v=spf1 ?all" ],

  // MX
  "priority": 10,
  "exchange": "",

  // SRV
  "priority": 5,
  "weight": 0,
  "port": 5269,
  "target": ""

Contributing and Development

How to add a new parser

Each RR (aka Resource Record or RData) parser is individual. Examples include:

  • A (parser/type.a.js)
  • AAAA (parser/type.aaaa.js)
  • CNAME (parser/type.cname.js)
  • TXT (parser/type.txt.js)
  • SRV (parser/type.srv.js)

Let’s say that To create a parser for a type which we don’t currently support, just add the appropriate information to dns.types.js and create a file for the name of the type in the format parser/type.<typename>.js.

For example, if CNAME wasn’t already supported and I wanted to add support for it I would follow these steps:

1) Update dns.types.js if it’s not there already.

  A: 			0x01	//   1
, NS: 		0x02  //   2
, CNAME: 	0x05  //   5    // I would simply add this line
, SOA: 		0x06  //   6

2) Capture a packet to test/fixtures/<domain>.<tld>.<type>.bin

This will construct and send a DNS query and save the first result that comes back.

In some cases (such as CNAME), the typical (or required) way to illicit the desired response is to make a request of a different type.

If that’s the case, manually rename the the file afterwards.

Ideally you should have some idea of what the result file should look like and should place that in test/fixtures/<domain>.<tld>.<type>.json

npm install -g dig.js
dig.js --name --type CNAME --output ./samples/

3) Create parser/type.cname.js

Copy parser/type.TEMPLATE.js to the type for which you wish to create support (parser/type.cname.js in this example) and fill in the blanks.

var unpackLabels = exports.DNS_UNPACK_LABELS || require('./dns.unpack-labels.js').DNS_UNPACK_LABELS;
exports.DNS_PARSER_TYPE_CNAME = function (ab, packet, record) {
  // record = { rdstart, rdlength, type, class }
  // example of not parsing and just leaving as binary data = new Uint8Array(ab.slice(record.rdstart, record.rdstart + record.rdlength));

  return record;

}('undefined' !== typeof window ? window : exports));

4) Document what you’ve learned in doc/<type>.txt

You may be right or you might be wrong, but you might be right.

In any case, take a minute to document some of the gritty details of what you learned about this record type - tips, tricks, little-known facts, etc.

This may help (or wildly mislead) others if there’s a bug in your parser that they need to track down. At the very least someone can follow a few links you followed and your thought process.

5) Check that my changes include these files

├── demo.html         (add the appropriate script tag)
├── doc
|   └── cname.txt
├── dns.classes.js    (not necessarily, but potentially)
├── dns.types.js
├── package.json      (bump the minor version)
├── packer
|   └── type.cname.js
├── parser
|   └── type.cname.js
└── test
    └── fixtures