builtin-plugins/Zeek_AF_Packet/init.zeek

AF_Packet

Packet source using AF_Packet.

Note: This module is in testing and is not yet considered stable!

Namespace

AF_Packet

Summary

Redefinable Options

AF_Packet::block_size: count &redef

Size of an individual block.

AF_Packet::block_timeout: interval &redef

Retire timeout for a single block.

AF_Packet::buffer_size: count &redef

Size of the ring-buffer.

AF_Packet::checksum_validation_mode: AF_Packet::ChecksumMode &redef

Checksum validation mode.

AF_Packet::enable_defrag: bool &redef

Toggle defragmentation of IP packets using PACKET_FANOUT_FLAG_DEFRAG.

AF_Packet::enable_fanout: bool &redef

Toggle whether to use PACKET_FANOUT.

AF_Packet::enable_hw_timestamping: bool &redef

Toggle whether to use hardware timestamps.

AF_Packet::fanout_id: count &redef

Fanout ID.

AF_Packet::fanout_mode: AF_Packet::FanoutMode &redef

Fanout mode.

AF_Packet::link_type: count &redef

Link type (default Ethernet).

Detailed Interface

Redefinable Options

AF_Packet::block_size
Type

count

Attributes

&redef

Default

32768

Size of an individual block. Needs to be a multiple of page size.

AF_Packet::block_timeout
Type

interval

Attributes

&redef

Default

10.0 msecs

Retire timeout for a single block.

AF_Packet::buffer_size
Type

count

Attributes

&redef

Default

134217728

Size of the ring-buffer.

AF_Packet::checksum_validation_mode
Type

AF_Packet::ChecksumMode

Attributes

&redef

Default

AF_Packet::CHECKSUM_ON

Checksum validation mode.

AF_Packet::enable_defrag
Type

bool

Attributes

&redef

Default

F

Toggle defragmentation of IP packets using PACKET_FANOUT_FLAG_DEFRAG.

AF_Packet::enable_fanout
Type

bool

Attributes

&redef

Default

T

Toggle whether to use PACKET_FANOUT.

AF_Packet::enable_hw_timestamping
Type

bool

Attributes

&redef

Default

F

Toggle whether to use hardware timestamps.

AF_Packet::fanout_id
Type

count

Attributes

&redef

Default

23

Fanout ID.

AF_Packet::fanout_mode
Type

AF_Packet::FanoutMode

Attributes

&redef

Default

AF_Packet::FANOUT_HASH

Fanout mode.

Type

count

Attributes

&redef

Default

1

Link type (default Ethernet).