zeek/scripts/policy
Christian Kreibich ccb1eab575 Add VLAN-aware connection tuples.
Loading policy/protocols/conntuple/vlan adapts Zeek's flow hashing and the
script-layer conn_id record to show VLAN tags when present.

I'm using script-layer ints for the VLAN tag representation for consistency with
what we alrady do elsewhere, but it seems odd since they can never be negative.

I'm currently skipping protocols/conntuple/vlan in test-all-policy since it
otherwise affects the external testsuites -- could revisit if people feel it
should run on these.
2025-06-04 14:31:17 -07:00
..
files/x509 Remove unified2 file analyzer 2022-08-19 14:05:00 +02:00
frameworks Redis: Add support for sending AUTH commands during connection 2025-06-03 11:38:38 -07:00
integration/collective-intel Remove barnyard2 integration scripts 2022-08-19 14:04:27 +02:00
misc Merge remote-tracking branch 'J-Gras/topic/jgras/add-unknown-proto-count' 2024-12-10 16:16:12 -07:00
protocols Add VLAN-aware connection tuples. 2025-06-04 14:31:17 -07:00
tuning Remove deprecated policy/tuning/default package 2024-08-07 11:58:21 -07:00