base/misc/find-checksum-offloading.zeek

ChecksumOffloading

Discover cases where the local interface is sniffed and outbound packets have checksum offloading. Load this script to receive a notice if it’s likely that checksum offload effects are being seen on a live interface or in a packet trace file.

Namespace

ChecksumOffloading

Imports

base/frameworks/notice

Summary

Redefinable Options

ChecksumOffloading::check_interval: interval &redef

The interval which is used for checking packet statistics to see if checksum offloading is affecting analysis.

Detailed Interface

Redefinable Options

ChecksumOffloading::check_interval
Type

interval

Attributes

&redef

Default

10.0 secs

The interval which is used for checking packet statistics to see if checksum offloading is affecting analysis.