mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00

This is WIP: The test case would require a new pcap or the possibility to overwrite analyzer mappings. The CustomEncapsulationSkip method and the corresponding options need to be removed.
7 lines
427 B
Text
7 lines
427 B
Text
module PacketAnalyzer::Default;
|
|
|
|
redef PacketAnalyzer::config_map += {
|
|
PacketAnalyzer::ConfigEntry($analyzer=PacketAnalyzer::ANALYZER_DEFAULTANALYZER),
|
|
PacketAnalyzer::ConfigEntry($parent=PacketAnalyzer::ANALYZER_DEFAULTANALYZER, $identifier=4, $analyzer=PacketAnalyzer::ANALYZER_IPV4),
|
|
PacketAnalyzer::ConfigEntry($parent=PacketAnalyzer::ANALYZER_DEFAULTANALYZER, $identifier=6, $analyzer=PacketAnalyzer::ANALYZER_IPV6)
|
|
};
|