policy/protocols/conn/mac-logging.zeek

Conn

This script adds link-layer address (MAC) information to the connection logs

Namespace

Conn

Imports

base/protocols/conn

Summary

Redefinitions

Conn::Info: record

New Fields

Conn::Info

orig_l2_addr: string &log &optional

Link-layer address of the originator, if available.

resp_l2_addr: string &log &optional

Link-layer address of the responder, if available.

Detailed Interface