Conn
This script adds link-layer address (MAC) information to the connection logs
/scripts/policy/protocols/conn/mac-logging.bro
Conn::Info
record
policy/protocols/conn/vlan-logging.bro
policy/protocols/conn/known-services.bro