base/bif/plugins/Zeek_VXLAN.events.bif.zeek

GLOBAL

Namespace

GLOBAL

Summary

Events

vxlan_packet: event

Generated for any packet encapsulated in a VXLAN tunnel.

Detailed Interface

Events

vxlan_packet

Type

event (outer: connection, inner: pkt_hdr, vni: count)

Generated for any packet encapsulated in a VXLAN tunnel. See RFC 7348 for more information about the VXLAN protocol.

Outer

The VXLAN tunnel connection.

Inner

The VXLAN-encapsulated Ethernet packet header and transport header.

Vni

VXLAN Network Identifier.

Note

Since this event may be raised on a per-packet basis, handling it may become particularly expensive for real-time analysis.