zeek/scripts
Christian Kreibich 30cb62362a Add VLAN-aware connection tuples.
Loading policy/protocols/conntuple/vlan adapts Zeek's flow hashing and the
script-layer conn_id record to show VLAN tags when present.

I'm using script-layer ints for the VLAN tag representation for consistency with
what we alrady do elsewhere, but it seems odd since they can never be negative.

I'm currently skipping protocols/conntuple/vlan in test-all-policy since it
otherwise affects the external testsuites -- could revisit if people feel it
should run on these.
2025-04-13 23:45:01 -07:00
..
base Establish plugin infrastructure for connection tuple "builders". 2025-04-13 22:13:52 -07:00
policy Add VLAN-aware connection tuples. 2025-04-13 23:45:01 -07:00
site telemetry: Deprecate prometheus.zeek policy script 2024-07-21 17:49:21 +02:00
spicy Spicy: Document lifetime semantics of Zeek analyzers created from Spicy. 2025-04-10 12:17:05 +02:00
zeekygen Add VLAN-aware connection tuples. 2025-04-13 23:45:01 -07:00
CMakeLists.txt Use the same rules as cmake submodule to reformat Zeek 2023-05-09 08:31:43 -07:00
test-all-policy.zeek Add VLAN-aware connection tuples. 2025-04-13 23:45:01 -07:00