base/packet-protocols/root/main.zeek

PacketAnalyzer::ROOT
Namespace:PacketAnalyzer::ROOT

Summary

Redefinable Options

PacketAnalyzer::ROOT::default_analyzer: PacketAnalyzer::Tag &redef Default analyzer (if we don’t know the link type, we assume raw IP)
PacketAnalyzer::ROOT::dispatch_map: PacketAnalyzer::DispatchMap &redef Identifier mappings based on link type

Detailed Interface

Redefinable Options

PacketAnalyzer::ROOT::default_analyzer
Type:PacketAnalyzer::Tag
Attributes:&redef
Default:PacketAnalyzer::ANALYZER_IP

Default analyzer (if we don’t know the link type, we assume raw IP)

PacketAnalyzer::ROOT::dispatch_map
Type:

PacketAnalyzer::DispatchMap
Attributes:

&redef
Default:

{}
Redefinition:

from base/packet-protocols/root/main.zeek

+=:

PacketAnalyzer::ROOT::DLT_EN10MB = (coerce [$analyzer=PacketAnalyzer::ANALYZER_ETHERNET] to record { analyzer:enum; }), PacketAnalyzer::ROOT::DLT_FDDI = (coerce [$analyzer=PacketAnalyzer::ANALYZER_FDDI] to record { analyzer:enum; }), PacketAnalyzer::ROOT::DLT_IEEE802_11 = (coerce [$analyzer=PacketAnalyzer::ANALYZER_IEEE802_11] to record { analyzer:enum; }), PacketAnalyzer::ROOT::DLT_IEEE802_11_RADIO = (coerce [$analyzer=PacketAnalyzer::ANALYZER_IEEE802_11_RADIO] to record { analyzer:enum; }), PacketAnalyzer::ROOT::DLT_LINUX_SLL = (coerce [$analyzer=PacketAnalyzer::ANALYZER_LINUXSLL] to record { analyzer:enum; }), PacketAnalyzer::ROOT::DLT_NFLOG = (coerce [$analyzer=PacketAnalyzer::ANALYZER_NFLOG] to record { analyzer:enum; })
Redefinition:

from base/packet-protocols/null/main.zeek

+=:

PacketAnalyzer::NULL::DLT_NULL = (coerce [$analyzer=PacketAnalyzer::ANALYZER_NULL] to record { analyzer:enum; })
Redefinition:

from base/packet-protocols/ppp_serial/main.zeek

+=:

PacketAnalyzer::PPP_SERIAL::DLT_PPP_SERIAL = (coerce [$analyzer=PacketAnalyzer::ANALYZER_PPPSERIAL] to record { analyzer:enum; })

Identifier mappings based on link type