zeek-plugin-bacnet
zeek-plugin-bacnet copied to clipboard
SNAP frame of BACnet/MSTP shows up in weird.log
SNAP frame of BACnet/MSTP is a little bit off the beaten path, but not so far off that it deserves to go in weird.log
#path weird
#open 2020-08-17-20-24-08
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
#types time string addr port addr port string string bool string
0.000000 - - - - - non_ip_packet_in_ethernet - F zeek
#close 2020-08-17-20-24-08