base/bif/plugins/Zeek_Geneve.events.bif.zeek¶
- GLOBAL¶
- Namespace
GLOBAL
Summary¶
Events¶
Generated for any packet encapsulated in a Geneve tunnel. |
Detailed Interface¶
Events¶
- geneve_packet¶
- Type
event
(outer:connection
, inner:pkt_hdr
, vni:count
)
Generated for any packet encapsulated in a Geneve tunnel. See RFC 8926 for more information about the Geneve protocol.
- Parameters
outer – The Geneve tunnel connection.
inner – The Geneve-encapsulated Ethernet packet header and transport header.
vni – Geneve Network Identifier.
Note
Since this event may be raised on a per-packet basis, handling it may become particularly expensive for real-time analysis.