Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-06 08:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Basic IMAP StartTLS analyzer.

Browse source 
Parses certificates out of imap connections using StartTLS. Aborts
processing if StartTLS is not found.
This commit is contained in:
Johanna Amann 2015-07-22 10:35:49 -07:00
parent 871b340ade
commit 4a5737708c
17 changed files with 331 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
testing/btest/scripts/base/protocols/imap/starttls.test Normal file
View file

@ -0,0 +1,9 @@
# @TEST-EXEC: bro -b -C -r $TRACES/tls/imap-starttls.pcap %INPUT
# @TEST-EXEC: btest-diff conn.log
# @TEST-EXEC: btest-diff ssl.log
# @TEST-EXEC: btest-diff x509.log
@load base/protocols/ssl
@load base/protocols/conn
@load base/frameworks/dpd
@load base/protocols/imap