policy/protocols/conn/mac-logging.zeek

Conn

This script adds link-layer address (MAC) information to the connection logs

Namespace

Conn

Imports

base/protocols/conn

Summary

Redefinitions

Conn::Info: record

New Fields Conn::Info orig_l2_addr: string &log &optional Link-layer address of the originator, if available. resp_l2_addr: string &log &optional Link-layer address of the responder, if available.

Detailed Interface