Skip to content

Commit 0ee5faf

Browse files
authored
Update 5-tuple link in Troubleshooting doc (#357)
1 parent b82881c commit 0ee5faf

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

.github/workflows/ci.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
runs-on: ${{ matrix.os }}
2020
strategy:
2121
matrix:
22-
os: [macos-12, ubuntu-20.04, windows-2022]
22+
os: [macos-14, ubuntu-24.04, windows-2022]
2323
steps:
2424
- uses: actions/checkout@v4
2525
with:

docs/Troubleshooting.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ detail.
2727
### Application problems
2828

2929
To start debugging such problems, it helps to understand how Zui opens flows
30-
extracted from pcaps. Once the [5-tuple](https://www.napatech.com/what-is-a-flow/), connection start time, and connection
30+
extracted from pcaps. Once the [5-tuple](https://nordvpn.com/cybersecurity/glossary/5-tuple/), connection start time, and connection
3131
duration are isolated from the Zeek `conn` record for the flow, Zui
3232
invokes `brimcap search` to extract the packets for the target flow
3333
into a temporary file. Once this temporary file has been written to the local
@@ -86,7 +86,7 @@ Stream_ or _Follow UDP Stream_, which will apply a filter of the format
8686
`tcp.stream eq N` or `udp.stream eq N`, where `N` is a number `0`, `1`, etc.
8787
based on which flow within the pcap is being isolated. When this is done,
8888
Wireshark appears to treat all packets as part of the same flow if they
89-
share the same [5-tuple](https://www.napatech.com/what-is-a-flow/),
89+
share the same [5-tuple](https://nordvpn.com/cybersecurity/glossary/5-tuple/),
9090
regardless of how long the flow lasts.
9191

9292
To similarly attempt to isolate flows, Zui relies on Zeek's `conn` event,

0 commit comments

Comments
 (0)