| nbns.count.add_rr | Additional RRs | Unsigned 16-bit integer | Number of additional records in packet |
| nbns.count.answers | Answer RRs | Unsigned 16-bit integer | Number of answers in packet |
| nbns.count.auth_rr | Authority RRs | Unsigned 16-bit integer | Number of authoritative records in packet |
| nbns.count.queries | Questions | Unsigned 16-bit integer | Number of queries in packet |
| nbns.flags | Flags | Unsigned 16-bit integer | |
| nbns.flags.authoritative | Authoritative | Boolean | Is the server is an authority for the domain? |
| nbns.flags.broadcast | Broadcast | Boolean | Is this a broadcast packet? |
| nbns.flags.opcode | Opcode | Unsigned 16-bit integer | Operation code |
| nbns.flags.rcode | Reply code | Unsigned 16-bit integer | Reply code |
| nbns.flags.recavail | Recursion available | Boolean | Can the server do recursive queries? |
| nbns.flags.recdesired | Recursion desired | Boolean | Do query recursively? |
| nbns.flags.response | Response | Boolean | Is the message a response? |
| nbns.flags.truncated | Truncated | Boolean | Is the message truncated? |
| nbns.id | Transaction ID | Unsigned 16-bit integer | Identification of transaction |