zeek-plugin-bacnet icon indicating copy to clipboard operation
zeek-plugin-bacnet copied to clipboard

SNAP frame of BACnet/MSTP shows up in weird.log

Open duffy-ocraven opened this issue 4 years ago • 3 comments

SNAP frame of BACnet/MSTP is a little bit off the beaten path, but not so far off that it deserves to go in weird.log

#path   weird
#open   2020-08-17-20-24-08
#fields ts      uid     id.orig_h       id.orig_p       id.resp_h       id.resp_p       name    addl    notice  peer
#types  time    string  addr    port    addr    port    string  string  bool    string
0.000000        -       -       -       -       -       non_ip_packet_in_ethernet       -       F       zeek
#close  2020-08-17-20-24-08

duffy-ocraven avatar Aug 18 '20 00:08 duffy-ocraven