Resolvers setting answer bits in queries

Description:

Show a list of resolvers which send queries containing values which should only be present in answers:
- TC bit set
- RA bit set
- RCODE > 0 

Note that these columns are only available as of ENTRADA 0.0.10

Impala Query:

select
src,
max(country) as country,
count(*) as total_queries,
sum(case when (q_tc=true or q_ra=true or q_rcode>0) then 1 else 0 end) as weird_queries,
sum(q_tc) as q_tc,
sum(q_ra) as q_ra,
sum(case when q_rcode > 0 then 1 else 0 end) as q_rcode
from
dns.queries
where
year=2017 and month=9
group by
src
having
weird_queries>0
order by
weird_queries desc

limit 10

Example Output: