base/packet-protocols/vxlan/main.zeek

PacketAnalyzer::VXLAN
Namespace

PacketAnalyzer::VXLAN

Summary

Redefinable Options

PacketAnalyzer::VXLAN::default_analyzer: PacketAnalyzer::Tag &redef

PacketAnalyzer::VXLAN::vxlan_ports: set &redef

The set of UDP ports used for VXLAN traffic.

Redefinitions

likely_server_ports: set &redef

Detailed Interface

Redefinable Options

PacketAnalyzer::VXLAN::default_analyzer
Type

PacketAnalyzer::Tag

Attributes

&redef

Default

PacketAnalyzer::ANALYZER_ETHERNET

PacketAnalyzer::VXLAN::vxlan_ports
Type

set [port]

Attributes

&redef

Default
{
   4789/udp
}

The set of UDP ports used for VXLAN traffic. Traffic using this UDP destination port will attempt to be decapsulated. Note that if if you customize this, you may still want to manually ensure that likely_server_ports also gets populated accordingly.