zeek/scripts/policy
Christian Kreibich 30cb62362a Add VLAN-aware connection tuples.
Loading policy/protocols/conntuple/vlan adapts Zeek's flow hashing and the
script-layer conn_id record to show VLAN tags when present.

I'm using script-layer ints for the VLAN tag representation for consistency with
what we alrady do elsewhere, but it seems odd since they can never be negative.

I'm currently skipping protocols/conntuple/vlan in test-all-policy since it
otherwise affects the external testsuites -- could revisit if people feel it
should run on these.
2025-04-13 23:45:01 -07:00
..
files/x509 Remove unified2 file analyzer 2022-08-19 14:05:00 +02:00
frameworks cluster/zeromq: Fix node_topic() and nodeid_topic() 2025-03-24 18:36:26 +01:00
integration/collective-intel Remove barnyard2 integration scripts 2022-08-19 14:04:27 +02:00
misc Merge remote-tracking branch 'J-Gras/topic/jgras/add-unknown-proto-count' 2024-12-10 16:16:12 -07:00
protocols Add VLAN-aware connection tuples. 2025-04-13 23:45:01 -07:00
tuning Remove deprecated policy/tuning/default package 2024-08-07 11:58:21 -07:00