policy/protocols/conn/mac-logging.zeek

Conn

This script adds link-layer address (MAC) information to the connection logs

Namespace:Conn
Imports:base/protocols/conn

Summary

Redefinitions

Conn::Info: record
New Fields:

Conn::Info

orig_l2_addr: string &log &optional

Link-layer address of the originator, if available.

resp_l2_addr: string &log &optional

Link-layer address of the responder, if available.

Detailed Interface