Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-14 04:28:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
zeek/testing/btest/core/tunnels
History
Arne Welzel fddbdf6232 init-bare: Default Tunnel::max_depth to 4 
In AWS GLB environments, the max_depth of 2 is easily reached due to packets
being encapsulated with GENEVE and VXLAN [1]. Any additional encapsulation
layer causes Zeek raise a weird and ignore the inner traffic. Bump the default
maximum depth to 4, while not common it's not unusual either to observe
this in the wild.

[1] https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-packet-formats.html

Closes #3439
2024-01-11 10:22:36 +01:00
..
gtp Remove analyzer_confirmation/analyzer_violation events (6.1 deprecation) 2023-06-14 10:07:22 -07:00
analyzer-confirmation.zeek Remove analyzer_confirmation/analyzer_violation events (6.1 deprecation) 2023-06-14 10:07:22 -07:00
ayiya.test Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
geneve-47101.zeek Add regression test using pcap from GH-2683 2023-05-24 16:34:25 +02:00
geneve-many-options.zeek Add test cases for Geneve. 2023-03-30 22:58:54 +02:00
geneve-truncated.zeek Add test cases for Geneve. 2023-03-30 22:58:54 +02:00
geneve-vxlan-truncated.zeek Add btest to test Geneve->VXLAN->Truncated inner packet 2023-05-24 16:34:25 +02:00
geneve.zeek Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
gre-aruba-amsdu.zeek Add support for 802.11 A-MSDU aggregates 2023-04-25 09:28:20 -07:00
gre-aruba-ccmp.zeek Remove workaround for tunnels from IEEE 802.11 analyzer 2023-04-25 09:28:20 -07:00
gre-aruba.zeek GH-1125: Support GRE ARUBA headers 2021-12-09 14:58:09 -07:00
gre-erspan3-dot1q.zeek GH-1019: deprecate icmp_conn params for ICMP events 2020-07-10 11:06:28 -07:00
gre-in-gre.test General btest cleanup 2020-08-11 11:26:22 -07:00
gre-over-udp.test Add registration for GRE-over-UDP 2023-10-16 11:42:24 -07:00
gre-pptp.test Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
gre.test Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
ip-in-ip-version.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
ip-in-ip.test GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
ip-tunnel-uid.test GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
max-depth.zeek init-bare: Default Tunnel::max_depth to 4 2024-01-11 10:22:36 +01:00
teredo-known-services.test Remove full scripts marked as 6.1 deprecations 2023-06-14 10:07:22 -07:00
teredo-udp-in-udp.zeek Fix crash in Analyzer::ForwardPacket due to recursive analyzer calls. 2021-03-25 08:45:38 -07:00
teredo.zeek Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
teredo_bubble_with_payload.test Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
vxlan-unknown-internal-packet.zeek GH-2684: Stop violating VXLAN for forwarding failures 2023-01-25 10:50:07 -07:00
vxlan.zeek Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00