Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BPF capture filter does not seem to be passed to Zeek correctly #474

Closed
mmguero opened this issue May 13, 2024 · 0 comments
Closed

BPF capture filter does not seem to be passed to Zeek correctly #474

mmguero opened this issue May 13, 2024 · 0 comments
Assignees
Labels
bug Something isn't working zeek Relating to Malcolm's use of Zeek
Milestone

Comments

@mmguero
Copy link
Collaborator

mmguero commented May 13, 2024

I am doing this with the capture filter in zeekdeploy.sh, but I don't seem to be doing anything with that variable.

See the Zeek docs for Packet Filtering. I should be taking this filter and setting it appropriately in the live zeek capture configs.

@mmguero mmguero added the bug Something isn't working label May 13, 2024
@mmguero mmguero added this to the v24.05.0 milestone May 13, 2024
@mmguero mmguero added the zeek Relating to Malcolm's use of Zeek label May 13, 2024
@mmguero mmguero self-assigned this May 15, 2024
mmguero added a commit to mmguero-dev/Malcolm that referenced this issue May 15, 2024
@mmguero mmguero closed this as completed May 21, 2024
This was referenced May 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working zeek Relating to Malcolm's use of Zeek
Projects
Status: Released
Development

No branches or pull requests

1 participant