zeek/scripts/base/frameworks/tunnels
Jon Siwek 9edbf3e53c Add GPRS Tunnelling Protocol (GTPv1) decapsulation.
This currently supports automatic decapsulation of GTP-U packets on
UDP port 2152.

The GTPv1 headers for such tunnels can be inspected by handling the
"gtpv1_g_pdu_packet" event, which has a parameter of type "gtpv1_hdr".

Analyzer and test cases are derived from submissions by Carsten Langer.

Addresses #690.
2012-10-19 14:02:35 -05:00
..
__load__.bro Add Teredo tunnel decapsulation. 2012-05-25 12:37:35 -05:00
main.bro Add GPRS Tunnelling Protocol (GTPv1) decapsulation. 2012-10-19 14:02:35 -05:00