main.zeek

PacketAnalyzer::Geneve

Namespace:: PacketAnalyzer::Geneve

Summary

Redefinable Options

PacketAnalyzer::Geneve::geneve_ports: set &redef

The set of UDP ports used for Geneve traffic.

Redefinitions

likely_server_ports: set &redef

Detailed Interface

Redefinable Options

PacketAnalyzer::Geneve::geneve_ports 

Type:

set [port]

Attributes:

&redef

Default:

{
   6081/udp
}

The set of UDP ports used for Geneve traffic. Traffic using this UDP destination port will attempt to be decapsulated. Note that if if you customize this, you may still want to manually ensure that likely_server_ports also gets populated accordingly.