mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
fddbdf6232
In AWS GLB environments, the max_depth of 2 is easily reached due to packets being encapsulated with GENEVE and VXLAN [1]. Any additional encapsulation layer causes Zeek raise a weird and ignore the inner traffic. Bump the default maximum depth to 4, while not common it's not unusual either to observe this in the wild. [1] https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-packet-formats.html Closes #3439 |
||
|---|---|---|
| .. | ||
| conn.log.cut | ||
| dns.log.cut | ||
| tunnel.log | ||