base/misc/find-checksum-offloading.zeek

ChecksumOffloading

Discover cases where the local interface is sniffed and outbound packets have checksum offloading. Load this script to receive a notice if it’s likely that checksum offload effects are being seen on a live interface or in a packet trace file.

Namespace:ChecksumOffloading
Imports:base/frameworks/notice

Summary

Redefinable Options

ChecksumOffloading::check_interval: interval &redef The interval which is used for checking packet statistics to see if checksum offloading is affecting analysis.

Detailed Interface

Redefinable Options

ChecksumOffloading::check_interval
Type:interval
Attributes:&redef
Default:10.0 secs

The interval which is used for checking packet statistics to see if checksum offloading is affecting analysis.