mirror of
https://github.com/zeek/zeek.git
synced 2025-10-07 17:18:20 +00:00
83ecbeea6d
The added pcap file was downloaded from an attachment to https://gitlab.com/wireshark/wireshark/-/issues/10193 without explicit license.
13 lines
359 B
Text
13 lines
359 B
Text
# @TEST-EXEC: zeek -b -r $TRACES/tunnels/geneve.pcap %INPUT >out
|
|
# @TEST-EXEC: btest-diff out
|
|
# @TEST-EXEC: btest-diff conn.log
|
|
# @TEST-EXEC: btest-diff tunnel.log
|
|
|
|
@load base/frameworks/tunnels
|
|
@load base/frameworks/dpd
|
|
@load base/protocols/conn
|
|
|
|
event geneve_packet(c: connection, inner: pkt_hdr, vni: count)
|
|
{
|
|
print "geneve_packet", c$id, inner, vni;
|
|
}
|