base/bif/plugins/Zeek_VXLAN.events.bif.zeek

GLOBAL
Namespace

GLOBAL

Summary

Events

vxlan_packet: event

Generated for any packet encapsulated in a VXLAN tunnel.

Detailed Interface

Events

vxlan_packet
Type

event (outer: connection, inner: pkt_hdr, vni: count)

Generated for any packet encapsulated in a VXLAN tunnel. See RFC 7348 for more information about the VXLAN protocol.

Parameters
  • outer – The VXLAN tunnel connection.

  • inner – The VXLAN-encapsulated Ethernet packet header and transport header.

  • vni – VXLAN Network Identifier.

Note

Since this event may be raised on a per-packet basis, handling it may become particularly expensive for real-time analysis.