dns detector: simplify code a bit by using AF_UNSPEC