MAC Address In Logs
TQ <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAM2MKSp_s-6LE0Q2gcNR8Q1PwL0S9NJeh2eqg=50xO0=o1rTiQ@mail.gmail.com> |
Is there a way to include MAC address in all of the logs or custom written logs? I saw the documentation ( https://docs.zeek.org/en/latest/scripts/policy/protocols/conn/mac-logging.bro.html), but didn't see any MAC addresses even though I could see them in Wireshark. Thanks, _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek