find-checksum-offloading.zeek

ChecksumOffloading

Discover cases where the local interface is sniffed and outbound packets have checksum offloading. Load this script to receive a notice if it’s likely that checksum offload effects are being seen on a live interface or in a packet trace file.

Namespace:: ChecksumOffloading
Imports:: base/frameworks/notice

Summary

Redefinable Options

ChecksumOffloading::check_interval: interval &redef

The interval which is used for checking packet statistics to see if checksum offloading is affecting analysis.

Detailed Interface

Redefinable Options

ChecksumOffloading::check_interval 

Type:: interval
Attributes:: &redef
Default:: 10.0 secs

The interval which is used for checking packet statistics to see if checksum offloading is affecting analysis.