mirror of
https://github.com/zeek/zeek.git
synced 2025-10-17 05:58:20 +00:00
56aa03031d
After the first 4 bytes, this traffic actually just looks like Ethernet. Rather than try to re-implement the ethernet analyzer, just check the length, skip 4 bytes, and pass it on.
6 lines
182 B
Text
6 lines
182 B
Text
module PacketAnalyzer::PBB;
|
|
|
|
event zeek_init() &priority=20
|
|
{
|
|
PacketAnalyzer::register_packet_analyzer(PacketAnalyzer::ANALYZER_PBB, 0x6558, PacketAnalyzer::ANALYZER_ETHERNET);
|
|
}
|