mirror of
https://github.com/zeek/zeek.git
synced 2025-10-12 03:28:19 +00:00
![]() This option indicates that the Teredo analyzer should wait until it sees both sides of a connection using a valid Teredo encapsulation before issuing a protocol_confirmation. Previous behavior confirmed on the first instance of a valid encapsulation, which could result in more false positives (and e.g. bogus entries in known-services.log). Addresses #890. |
||
---|---|---|
.. | ||
ayiya.test | ||
false-teredo.bro | ||
ip-in-ip.test | ||
ip-tunnel-uid.test | ||
teredo-known-services.test | ||
teredo.bro | ||
teredo_bubble_with_payload.test |