Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-16 05:28:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Refactor IP-in-IP tunnel support.

Browse source 
UDP tunnel support removed for now, to be re-added in specific
analyzers later, but IP-in-IP is now decapsulated recursively
so nested tunnels can be seen and the inner packets get sent
through the IP fragment reassembler if necessary.
This commit is contained in:
Jon Siwek 2012-04-23 13:15:29 -05:00
parent 4062fc1776
commit b51dd191d7
21 changed files with 300 additions and 323 deletions
Download patch file Download diff file Expand all files Collapse all files

10
src/types.bif
View file

@ -170,16 +170,18 @@ enum ID %{
module Tunnel;
enum Tunneltype %{
enum Type %{
NONE,
IP6_IN_IP,
IP4_IN_IP,
IP6_IN_IP4,
IP4_IN_IP4,
IP6_IN_IP6,
IP4_IN_IP6,
IP6_IN_UDP,
IP4_IN_UDP,
IP6_IN_AYIAY,
IP4_IN_AYIAY,
%}
type Parent: record;
type EncapsulatingConn: record;
module GLOBAL;