Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
zeek/testing/btest/Traces/tunnels
History
Exact
Arne Welzel fddbdf6232 init-bare: Default Tunnel::max_depth to 4 
In AWS GLB environments, the max_depth of 2 is easily reached due to packets
being encapsulated with GENEVE and VXLAN [1]. Any additional encapsulation
layer causes Zeek raise a weird and ignore the inner traffic. Bump the default
maximum depth to 4, while not common it's not unusual either to observe
this in the wild.

[1] https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-packet-formats.html

Closes #3439
2024-01-11 10:22:36 +01:00
..
gtp Only allow a single trace file (-r) or interface (-i) option on the command-line 2020-01-31 09:34:54 -07:00
4in4.pcap Refactor IP-in-IP tunnel support. 2012-04-23 13:15:29 -05:00
4in6.pcap Refactor IP-in-IP tunnel support. 2012-04-23 13:15:29 -05:00
6in4.pcap Refactor IP-in-IP tunnel support. 2012-04-23 13:15:29 -05:00
6in6-tunnel-change.pcap Refactor IP-in-IP tunnel support. 2012-04-23 13:15:29 -05:00
6in6.pcap Refactor IP-in-IP tunnel support. 2012-04-23 13:15:29 -05:00
6in6in6.pcap Refactor IP-in-IP tunnel support. 2012-04-23 13:15:29 -05:00
ayiya3.trace Add AYIYA tunnel decapsulation unit test. 2012-06-05 15:17:27 -05:00
geneve-47101.pcap Add regression test using pcap from GH-2683 2023-05-24 16:34:25 +02:00
geneve-many-options.pcap Add test cases for Geneve. 2023-03-30 22:58:54 +02:00
geneve-truncated.pcap Add test cases for Geneve. 2023-03-30 22:58:54 +02:00
geneve-vxlan-dns-truncated.pcap Add btest to test Geneve->VXLAN->Truncated inner packet 2023-05-24 16:34:25 +02:00
geneve.pcap Add basic testing for Geneve protocol analyzer 2021-04-27 11:21:29 +02:00
geneve.README Add basic testing for Geneve protocol analyzer 2021-04-27 11:21:29 +02:00
gre-aruba-amsdu.pcap Add support for 802.11 A-MSDU aggregates 2023-04-25 09:28:20 -07:00
gre-aruba-ccmp.pcap Fix IEEE 802.11 analyzer to skip packets with the Protected bit enabled 2023-04-25 09:28:20 -07:00
gre-aruba.pcap GH-1125: Support GRE ARUBA headers 2021-12-09 14:58:09 -07:00
gre-erspan3-dot1q.pcap GH-887: improve GRE/ERSPAN parsing of non-IPv4/IPv6 inner payload 2020-03-27 15:22:00 -07:00
gre-over-udp-4754.pcap gre-over-udp: Update testing pcap with both endpoints 2023-10-17 12:30:14 +02:00
gre-pptp.pcap BIT-1798: fix PPTP GRE tunnel decapsulation 2018-08-14 16:48:04 -05:00
gre-sample.pcap BIT-867 - Support GRE tunnel decapsulation. 2014-01-16 16:03:04 -06:00
gre-within-gre.pcap BIT-867 - Support GRE tunnel decapsulation. 2014-01-16 16:03:04 -06:00
mpls-6in6-6in6-4in6-invalid-version-4.pcap Fix OOB read in Sessions.cc 2017-10-19 10:29:29 -07:00
mpls-6in6-6in6-invalid-version-6.pcap Fix OOB read in Sessions.cc 2017-10-19 10:29:29 -07:00
ping6-in-ipv4.pcap Fix for IP tunnel UID persistence. 2012-04-27 10:28:46 -05:00
socks.pcap Adding a SOCKS test case. 2012-06-15 16:01:59 -07:00
teredo-udp-in-udp.pcap Fix crash in Analyzer::ForwardPacket due to recursive analyzer calls. 2021-03-25 08:45:38 -07:00
Teredo.pcap Add Teredo-specific events. 2012-06-05 15:07:56 -05:00
teredo_bubble_with_payload.pcap Make Teredo bubble packet parsing more lenient. 2012-06-19 12:59:38 -05:00
vxlan-encapsulated-http.pcap packet_analysis: Do not raise analyzer_confirmation per-packet for tunnels 2022-09-27 12:49:56 +02:00
vxlan-encapsulated-igmp-v2.pcap GH-2684: Stop violating VXLAN for forwarding failures 2023-01-25 10:50:07 -07:00
vxlan-triple-v2.pcap init-bare: Default Tunnel::max_depth to 4 2024-01-11 10:22:36 +01:00
vxlan.pcap GH-250: Improve/cleanup VXLAN decapsulation support 2019-03-12 18:15:34 -07:00