Start porting the old spicy TLS analyzer into Zeek

This is very WIP and currently produces a link error.
This commit is contained in:
Johanna Amann 2023-03-17 13:07:21 +01:00
parent 85acdea90f
commit 71cd4b2cf4
7 changed files with 1616 additions and 17 deletions

View file

@ -96,13 +96,13 @@ function describe_file(f: fa_file): string
event zeek_init() &priority=5
{
Files::register_protocol(Analyzer::ANALYZER_SSL,
[$get_file_handle = SSL::get_file_handle,
$describe = SSL::describe_file]);
# Files::register_protocol(Analyzer::ANALYZER_SSL,
# [$get_file_handle = SSL::get_file_handle,
# $describe = SSL::describe_file]);
Files::register_protocol(Analyzer::ANALYZER_DTLS,
[$get_file_handle = SSL::get_file_handle,
$describe = SSL::describe_file]);
# Files::register_protocol(Analyzer::ANALYZER_DTLS,
# [$get_file_handle = SSL::get_file_handle,
# $describe = SSL::describe_file]);
local ssl_filter = Log::get_filter(SSL::LOG, "default");