diff --git a/scripts/policy/protocols/ssl/log-hostcerts-only.zeek b/scripts/policy/protocols/ssl/log-hostcerts-only.zeek
index 3aefac088a..bd5be7d8b0 100644
--- a/scripts/policy/protocols/ssl/log-hostcerts-only.zeek
+++ b/scripts/policy/protocols/ssl/log-hostcerts-only.zeek
@@ -41,7 +41,7 @@ event zeek_init() &priority=2
 
 event file_sniff(f: fa_file, meta: fa_metadata) &priority=4
 	{
-	if ( |f$conns| != 1 )
+	if (( ! f?$conns ) || ( |f$conns| != 1 ))
 		return;
 
 	if ( ! f?$info || ! f$info?$mime_type )