Looks for traffic on DNS server port 53. Check for the DNS Client RData overflow vulnerability. Do not alert on obsolete or experimental RData record types.
preprocessor dns: \ ports { 53 } \ enable_rdata_overflow