From a4cd5dd452894ce9f20d561e2c3a34edd5027933 Mon Sep 17 00:00:00 2001 From: Jan Grashoefer Date: Mon, 10 Jul 2023 18:35:42 +0200 Subject: [PATCH] af_packet: Note that Zeek ships with a built-in version. Closes #64. --- src/iosource/af_packet/README | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/iosource/af_packet/README b/src/iosource/af_packet/README index 2c601f508b..ecf9c991ce 100644 --- a/src/iosource/af_packet/README +++ b/src/iosource/af_packet/README @@ -3,6 +3,9 @@ This plugin provides native AF_Packet support for Zeek. For details about AF_Packet, see the corresponding [man page](http://man7.org/linux/man-pages/man7/packet.7.html). +> **Note**: +> Starting with Zeek version 5.2, Zeek ships with a built-in version of this plugin. + ## Installation Before installing the plugin, make sure your kernel supports PACKET_FANOUT[^1] and TPACKET_V3.