Thanks Anthony,
Here is what I have so far. How do I create a notice out of it?
event dns_request(c: connection, msg: dns_msg, query: string, qtype: count, qclass: count) &priority=5
{
if ( c$dns$qtype == PTR )
return;
}