inactive
369
edits
Ring Buffer Configuration Guide: Difference between revisions
Jump to navigation
Jump to search
m
→Capture SSL traffic only until L4
| Line 108: | Line 108: | ||
[[File:Ring buffer filter one ip.png|border|600px]] | [[File:Ring buffer filter one ip.png|border|600px]] | ||
==== Capture SSL traffic only | ==== Capture SSL traffic only up to L4 ==== | ||
Also a common use case is to not capture encrypted content. This can be done by setting up a rule for encrypted L7 protocols to capture only up to the L4 header for IP and TCP investigation. This can be configured with the following settings: | Also a common use case is to not capture encrypted content. This can be done by setting up a rule for encrypted L7 protocols to capture only up to the L4 header for IP and TCP investigation. This can be configured with the following settings: | ||