[ARGUS] How many layer from tunnels can argus detect

Ming Fu via Argus-info argus-info at lists.andrew.cmu.edu
Mon Jun 24 15:39:27 EDT 2024


Hi Carter,

I have a double tunneled traffic to argus 5. The outer tunnel is VXLAN, the inner tunnel is GENEVE, the real traffic inside the inner tunnel is Eithernet/IP. I have the ARGUS_TUNNEL_DISCOVERY="yes" set. I can use ra to search for the outer tunnel IP and inner tunnel IP, but I can't search the actual packet inside of the inner tunnel. Is the tunnel discovery limited to one tunnel, or I did not configure properly?

Regards,
Ming

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20240624/3c1baf90/attachment.htm>


More information about the argus mailing list