mirror of
https://github.com/zeek/zeek.git
synced 2025-10-09 10:08:20 +00:00
59f0477d29
This is a small caveat to this implementation. The ethernet header that is carried over the tunnel is ignored. If a user tries to do MAC address logging, it will only show the MAC addresses for the outer tunnel and the inner MAC addresses will be stripped and not available anywhere.
4 lines
123 B
Text
4 lines
123 B
Text
# @TEST-EXEC: bro -C -b -r $TRACES/erspan.trace %INPUT
|
|
# @TEST-EXEC: btest-diff tunnel.log
|
|
|
|
@load base/frameworks/tunnels
|