zeek/scripts/base/frameworks/tunnels
Jon Siwek 09ae539ea8 GH-250: Improve/cleanup VXLAN decapsulation support
* Better parsing/error-checking of VXLAN and encapsulated packet headers

* Add/implement the "vxlan_packet" event

* Add "Tunnel::vxlan_ports" option to tune the set of VXLAN ports to
  analyze/decapsulate

* Add "Tunnel::validate_vxlan_checksums" option to allow for tuning of how
  checksums associated with the outer UDP header of a possible VXLAN
  tunnel are handled

Fixes GH-250
2019-03-12 18:15:34 -07:00
..
__load__.bro Add Teredo tunnel decapsulation. 2012-05-25 12:37:35 -05:00
main.bro GH-250: Improve/cleanup VXLAN decapsulation support 2019-03-12 18:15:34 -07:00
README Add README files for most Bro frameworks 2013-10-11 00:19:37 -05:00

The tunnels framework handles the tracking/logging of tunnels (e.g. Teredo,
AYIYA, or IP-in-IP such as 6to4 where "IP" is either IPv4 or IPv6).