builtin-plugins/Zeek_AF_Packet/init.zeek
- AF_Packet
Packet source using AF_Packet.
Note: This module is in testing and is not yet considered stable!
- Namespace
AF_Packet
Summary
Redefinable Options
Size of an individual block. |
|
Retire timeout for a single block. |
|
Size of the ring-buffer. |
|
|
Checksum validation mode. |
Toggle defragmentation of IP packets using PACKET_FANOUT_FLAG_DEFRAG. |
|
Toggle whether to use PACKET_FANOUT. |
|
Toggle whether to use hardware timestamps. |
|
Fanout ID. |
|
Fanout mode. |
|
Link type (default Ethernet). |
Detailed Interface
Redefinable Options
- AF_Packet::block_size
-
Size of an individual block. Needs to be a multiple of page size.
- AF_Packet::block_timeout
-
Retire timeout for a single block.
- AF_Packet::buffer_size
-
Size of the ring-buffer.
- AF_Packet::checksum_validation_mode
- Type
- Attributes
- Default
AF_Packet::CHECKSUM_ON
Checksum validation mode.
- AF_Packet::enable_defrag
-
Toggle defragmentation of IP packets using PACKET_FANOUT_FLAG_DEFRAG.
- AF_Packet::enable_fanout
-
Toggle whether to use PACKET_FANOUT.
- AF_Packet::enable_hw_timestamping
-
Toggle whether to use hardware timestamps.
- AF_Packet::fanout_id
-
Fanout ID.
- AF_Packet::fanout_mode
- Type
- Attributes
- Default
AF_Packet::FANOUT_HASH
Fanout mode.
- AF_Packet::link_type
-
Link type (default Ethernet).