mirror of
https://github.com/zeek/zeek.git
synced 2025-10-08 01:28:20 +00:00
b7dee712d5
This changes the decapsulation logic for GRE/ERSPAN payloads to re-use existing Layer 2 parsing logic that already handles things like 802.1Q tags correctly before going on to process the inner IPv4/IPv6 payload.
5 lines
258 B
Text
5 lines
258 B
Text
echo request, 43, 4
|
|
echo reply, 43, 4
|
|
[orig_h=172.31.10.31, orig_p=8/icmp, resp_h=172.31.10.2, resp_p=0/icmp]
|
|
[[cid=[orig_h=172.31.1.23, orig_p=0/unknown, resp_h=172.31.1.135, resp_p=0/unknown], tunnel_type=Tunnel::GRE, uid=CHhAvVGS1DHFjwGM9]]
|
|
vlans 10, nil
|