base/bif/plugins/Zeek_Geneve.events.bif.zeek¶
- GLOBAL¶
- Namespace
GLOBAL
Summary¶
Events¶
Generated for any packet encapsulated in a Geneve tunnel. |
Detailed Interface¶
Events¶
- geneve_packet¶
- Type
event(outer:connection, inner:pkt_hdr, vni:count)
Generated for any packet encapsulated in a Geneve tunnel. See RFC 8926 for more information about the Geneve protocol.
- Outer
The Geneve tunnel connection.
- Inner
The Geneve-encapsulated Ethernet packet header and transport header.
- Vni
Geneve Network Identifier.
Note
Since this event may be raised on a per-packet basis, handling it may become particularly expensive for real-time analysis.