# @TEST-EXEC: zeek -b -r $TRACES/tunnels/vxlan.pcap %INPUT >out # @TEST-EXEC: btest-diff out # @TEST-EXEC: btest-diff conn.log # @TEST-EXEC: btest-diff tunnel.log @load base/frameworks/tunnels @load base/frameworks/dpd @load base/protocols/conn event vxlan_packet(c: connection, inner: pkt_hdr, vni: count) { print "vxlan_packet", c$id, inner, vni; }