base/bif/plugins/Zeek_Geneve.events.bif.zeek

GLOBAL
Namespace

GLOBAL

Summary

Events

geneve_packet: event

Generated for any packet encapsulated in a Geneve tunnel.

Detailed Interface

Events

geneve_packet
Type

event (outer: connection, inner: pkt_hdr, vni: count)

Generated for any packet encapsulated in a Geneve tunnel. See RFC 8926 for more information about the Geneve protocol.

Parameters

  • outer – The Geneve tunnel connection.

  • inner – The Geneve-encapsulated Ethernet packet header and transport header.

  • vni – Geneve Network Identifier.

Note

Since this event may be raised on a per-packet basis, handling it may become particularly expensive for real-time analysis.