main.zeek

PacketAnalyzer::VXLAN

Namespace: PacketAnalyzer::VXLAN

Summary

Redefinable Options

`PacketAnalyzer::VXLAN::default_analyzer`: `PacketAnalyzer::Tag` `&redef`
`PacketAnalyzer::VXLAN::vxlan_ports`: `set` `&redef`	The set of UDP ports used for VXLAN traffic.

Redefinitions

likely_server_ports: set &redef

Detailed Interface

Redefinable Options

PacketAnalyzer::VXLAN::default_analyzer 

Type: PacketAnalyzer::Tag
Attributes: &redef
Default: PacketAnalyzer::ANALYZER_ETHERNET

PacketAnalyzer::VXLAN::vxlan_ports 

Type

set [port]

Attributes

&redef

Default

{
   4789/udp
}

The set of UDP ports used for VXLAN traffic. Traffic using this UDP destination port will attempt to be decapsulated. Note that if if you customize this, you may still want to manually ensure that likely_server_ports also gets populated accordingly.