zeek/scripts/policy/protocols/conntuple
Christian Kreibich 30cb62362a Add VLAN-aware connection tuples.
Loading policy/protocols/conntuple/vlan adapts Zeek's flow hashing and the
script-layer conn_id record to show VLAN tags when present.

I'm using script-layer ints for the VLAN tag representation for consistency with
what we alrady do elsewhere, but it seems odd since they can never be negative.

I'm currently skipping protocols/conntuple/vlan in test-all-policy since it
otherwise affects the external testsuites -- could revisit if people feel it
should run on these.
2025-04-13 23:45:01 -07:00
..
vlan.zeek Add VLAN-aware connection tuples. 2025-04-13 23:45:01 -07:00