ESP Traffic
"Weasel, Gary W CIV DISA RE (US)" <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <0C34D9CA9B9DBB45B1C51871C177B4B291C661A8@UMECHPA68.easf.csd.disa.mil> |
All, Is there anyone who has written a plugin or script to make zeek create a conn log for any ESP traffic over IPv4? As far as I can tell, zeek seems to turn a blind eye to that traffic and not report on it at all otherwise. - Gary _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek