base/bif/plugins/Zeek_VXLAN.events.bif.zeek

GLOBAL
Namespace:GLOBAL

Summary

Events

vxlan_packet: event Generated for any packet encapsulated in a VXLAN tunnel.

Detailed Interface

Events

vxlan_packet
Type:event (outer: connection, inner: pkt_hdr, vni: count)

Generated for any packet encapsulated in a VXLAN tunnel. See RFC 7348 for more information about the VXLAN protocol.

Outer:The VXLAN tunnel connection.
Inner:The VXLAN-encapsulated Ethernet packet header and transport header.
Vni:VXLAN Network Identifier.

Note

Since this event may be raised on a per-packet basis, handling it may become particularly expensive for real-time analysis.