Ticket: 7228

That means log the rest of queries and answers, even if the
final field additionals is corrupt.
Set an event in this case.

To accomodate cases found in QA.
The case looks like a CnC channel on port 53, but not using DNS.

First request has a very big record length, but all the header
fields indicating numbers are 0.

First reply has a very big record length as well, there is one
non-zero field for number, but the flag indicates a request...