builtin-plugins/Zeek_AF_Packet/init.zeek¶
- AF_Packet¶
Packet source using AF_Packet.
Note: This module is in testing and is not yet considered stable!
- Namespace
AF_Packet
Summary¶
Redefinable Options¶
Size of an individual block. |
|
Retire timeout for a single block. |
|
Size of the ring-buffer. |
|
|
Checksum validation mode. |
Toggle defragmentation of IP packets using PACKET_FANOUT_FLAG_DEFRAG. |
|
Toggle whether to use PACKET_FANOUT. |
|
Toggle whether to use hardware timestamps. |
|
Fanout ID. |
|
Fanout mode. |
|
Link type (default Ethernet). |
Detailed Interface¶
Redefinable Options¶
- AF_Packet::block_size¶
-
Size of an individual block. Needs to be a multiple of page size.
- AF_Packet::block_timeout¶
-
Retire timeout for a single block.
- AF_Packet::buffer_size¶
-
Size of the ring-buffer.
- AF_Packet::checksum_validation_mode¶
- Type
- Attributes
- Default
AF_Packet::CHECKSUM_ON
Checksum validation mode.
- AF_Packet::enable_defrag¶
-
Toggle defragmentation of IP packets using PACKET_FANOUT_FLAG_DEFRAG.
- AF_Packet::enable_fanout¶
-
Toggle whether to use PACKET_FANOUT.
- AF_Packet::enable_hw_timestamping¶
-
Toggle whether to use hardware timestamps.
- AF_Packet::fanout_id¶
-
Fanout ID.
- AF_Packet::fanout_mode¶
- Type
- Attributes
- Default
AF_Packet::FANOUT_HASH
Fanout mode.
- AF_Packet::link_type¶
-
Link type (default Ethernet).