Just to clarify – the change is easy. When you see a "dns" record, you capture certain things as you do now. But you don't add to "$results" until you see the subsequent type of record. (Special-case if the subsequent record does not exist ... two "dns" records back-to-back. A simple flag-variable set to True in the first case and to False in the second case can alert your first-case handler that the second-case never occurred since the first-case ran.