added dns: match DNS query to flow
minor