dns: tag DNS flows