mirror of
https://github.com/zeek/zeek.git
synced 2025-10-13 12:08:20 +00:00
19 lines
1 KiB
Text
19 lines
1 KiB
Text
module LL_NULL;
|
|
|
|
const DLT_NULL : count = 0;
|
|
const AF_INET : count = 2;
|
|
const AF_INET6 : count = 10;
|
|
|
|
redef LLAnalyzer::config_map += {
|
|
LLAnalyzer::ConfigEntry($identifier=DLT_NULL, $analyzer=LLAnalyzer::LLANALYZER_NULL),
|
|
LLAnalyzer::ConfigEntry($parent=LLAnalyzer::LLANALYZER_NULL, $identifier=AF_INET, $analyzer=LLAnalyzer::LLANALYZER_IPV4),
|
|
|
|
## From the Wireshark Wiki: AF_INET6ANALYZER, unfortunately, has different values in
|
|
## {NetBSD,OpenBSD,BSD/OS}, {FreeBSD,DragonFlyBSD}, and {Darwin/Mac OS X}, so an IPv6
|
|
## packet might have a link-layer header with 24, 28, or 30 as the AF_ value. As we
|
|
## may be reading traces captured on platforms other than what we're running on, we
|
|
## accept them all here.
|
|
LLAnalyzer::ConfigEntry($parent=LLAnalyzer::LLANALYZER_NULL, $identifier=24, $analyzer=LLAnalyzer::LLANALYZER_IPV6),
|
|
LLAnalyzer::ConfigEntry($parent=LLAnalyzer::LLANALYZER_NULL, $identifier=28, $analyzer=LLAnalyzer::LLANALYZER_IPV6),
|
|
LLAnalyzer::ConfigEntry($parent=LLAnalyzer::LLANALYZER_NULL, $identifier=30, $analyzer=LLAnalyzer::LLANALYZER_IPV6)
|
|
};
|