Closed fmadio closed 7 years ago
included there`s no packetscope tags
ip.proto == tcp/udp/etc ...
this checks both ipv4 + ipv6. Update includes tcp/udp checks are now both ipv4 and ipv6. e.g. udp.port == 1000 will fetch udp packets with both ipv4 and ipv6 encapsulation.
also included an ipv6 address histogram
regression checked in, closing
packet scope currently does no decode IPv6 headers. e.g. TCP/UDP block filtering ignores any IPv6 packets.
Add support for IPv6 decoding + TCP/UDP parsing.