policy/protocols/conn/mac-logging.zeek

Conn

This script adds link-layer address (MAC) information to the connection logs

Namespace: Conn
Imports: base/protocols/conn

Summary

Redefinitions

Conn::Info: record

New Fields

orig_l2_addr: string &log &optional: Link-layer address of the originator, if available.
resp_l2_addr: string &log &optional: Link-layer address of the responder, if available.

Detailed Interface