zeek/scripts
Arne Welzel fddbdf6232 init-bare: Default Tunnel::max_depth to 4
In AWS GLB environments, the max_depth of 2 is easily reached due to packets
being encapsulated with GENEVE and VXLAN [1]. Any additional encapsulation
layer causes Zeek raise a weird and ignore the inner traffic. Bump the default
maximum depth to 4, while not common it's not unusual either to observe
this in the wild.

[1] https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-packet-formats.html

Closes #3439
2024-01-11 10:22:36 +01:00
..
base init-bare: Default Tunnel::max_depth to 4 2024-01-11 10:22:36 +01:00
policy minor fixes for script optimization, exporting of attr_name, script layout tweak 2023-12-04 16:48:19 -08:00
site telemetry: Disable metrics centralization by default 2023-06-21 20:13:55 +02:00
spicy improve search-ability in zeek.spicy 2023-12-14 16:24:32 -05:00
zeekygen zeekygen: Disable zeek_init() handlers causing error output 2023-10-11 15:18:33 +02:00
CMakeLists.txt Use the same rules as cmake submodule to reformat Zeek 2023-05-09 08:31:43 -07:00
test-all-policy.zeek telemetry: Disable metrics centralization by default 2023-06-21 20:13:55 +02:00