zeek/testing/btest/core/tunnels
Jon Siwek 6f346c8406 Add Teredo analysis option to reduce false positive decapsulation.
The Tunnel::yielding_teredo_decapsulation (on by default) makes it so
the Teredo analyzer doesn't attempt to decapsulate payloads when
there's already a sibling analyzer that thinks it's parsing the right
protocol.  Sometimes, UDP payloads just happen to look like they are
validly Teredo-encapsulated and doing further analysis on the
decapsulated packet can quickly turn into a weird; this change helps
reduce such weirds.
2012-06-07 13:01:10 -05:00
..
ayiya.test Add AYIYA tunnel decapsulation unit test. 2012-06-05 15:17:27 -05:00
false-teredo.bro Add Teredo analysis option to reduce false positive decapsulation. 2012-06-07 13:01:10 -05:00
ip-in-ip.test Make tunnels always identifiable by UID, tunnel.log now gets populated. 2012-04-26 12:29:59 -05:00
ip-tunnel-uid.test Fix for IP tunnel UID persistence. 2012-04-27 10:28:46 -05:00
teredo.bro Add Teredo-specific events. 2012-06-05 15:07:56 -05:00