[Zeek] MAC Address In Logs

TQ nothinrandom at gmail.com
Mon Feb 18 22:52:06 PST 2019


Is there a way to include MAC address in all of the logs or custom written
logs?  I saw the documentation (
https://docs.zeek.org/en/latest/scripts/policy/protocols/conn/mac-logging.bro.html),
but didn't see any MAC addresses even though I could see them in Wireshark.

Thanks,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190218/3980da9f/attachment.html 


More information about the Zeek mailing list