mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
55 lines
2.3 KiB
C++
55 lines
2.3 KiB
C++
## Generated for any IPv6 packet encapsulated in a Teredo tunnel.
|
|
## See :rfc:`4380` for more information about the Teredo protocol.
|
|
##
|
|
## outer: The Teredo tunnel connection.
|
|
##
|
|
## inner: The Teredo-encapsulated IPv6 packet header and transport header.
|
|
##
|
|
## .. zeek:see:: teredo_authentication teredo_origin_indication teredo_bubble
|
|
##
|
|
## .. note:: Since this event may be raised on a per-packet basis, handling
|
|
## it may become particularly expensive for real-time analysis.
|
|
event teredo_packet%(outer: connection, inner: teredo_hdr%);
|
|
|
|
## Generated for IPv6 packets encapsulated in a Teredo tunnel that
|
|
## use the Teredo authentication encapsulation method.
|
|
## See :rfc:`4380` for more information about the Teredo protocol.
|
|
##
|
|
## outer: The Teredo tunnel connection.
|
|
##
|
|
## inner: The Teredo-encapsulated IPv6 packet header and transport header.
|
|
##
|
|
## .. zeek:see:: teredo_packet teredo_origin_indication teredo_bubble
|
|
##
|
|
## .. note:: Since this event may be raised on a per-packet basis, handling
|
|
## it may become particularly expensive for real-time analysis.
|
|
event teredo_authentication%(outer: connection, inner: teredo_hdr%);
|
|
|
|
## Generated for IPv6 packets encapsulated in a Teredo tunnel that
|
|
## use the Teredo origin indication encapsulation method.
|
|
## See :rfc:`4380` for more information about the Teredo protocol.
|
|
##
|
|
## outer: The Teredo tunnel connection.
|
|
##
|
|
## inner: The Teredo-encapsulated IPv6 packet header and transport header.
|
|
##
|
|
## .. zeek:see:: teredo_packet teredo_authentication teredo_bubble
|
|
##
|
|
## .. note:: Since this event may be raised on a per-packet basis, handling
|
|
## it may become particularly expensive for real-time analysis.
|
|
event teredo_origin_indication%(outer: connection, inner: teredo_hdr%);
|
|
|
|
## Generated for Teredo bubble packets. That is, IPv6 packets encapsulated
|
|
## in a Teredo tunnel that have a Next Header value of :zeek:id:`IPPROTO_NONE`.
|
|
## See :rfc:`4380` for more information about the Teredo protocol.
|
|
##
|
|
## outer: The Teredo tunnel connection.
|
|
##
|
|
## inner: The Teredo-encapsulated IPv6 packet header and transport header.
|
|
##
|
|
## .. zeek:see:: teredo_packet teredo_authentication teredo_origin_indication
|
|
##
|
|
## .. note:: Since this event may be raised on a per-packet basis, handling
|
|
## it may become particularly expensive for real-time analysis.
|
|
event teredo_bubble%(outer: connection, inner: teredo_hdr%);
|
|
|