mirror of
https://github.com/zeek/zeek.git
synced 2025-10-07 09:08:20 +00:00
Change ciphers in changes ciphers from a set to a vector.
This preserves the ordering of the cipher suites the client sent, allowing e.g. better client fingerprinting.
This commit is contained in:
parent
dc52846b6f
commit
b7dc03bb82
6 changed files with 96 additions and 7 deletions
|
@ -0,0 +1,9 @@
|
|||
# @TEST-EXEC: bro -r $TRACES/tls1.2.trace %INPUT
|
||||
# @TEST-EXEC: btest-diff .stdout
|
||||
|
||||
event ssl_client_hello(c: connection, version: count, possible_ts: time, client_random: string, session_id: string, ciphers: index_vec)
|
||||
{
|
||||
print fmt("Got %d cipher suites", |ciphers|);
|
||||
for ( i in ciphers )
|
||||
print SSL::cipher_desc[ciphers[i]];
|
||||
}
|
|
@ -1,7 +1,7 @@
|
|||
# @TEST-EXEC: bro -r $TRACES/tls1.2.trace %INPUT
|
||||
# @TEST-EXEC: btest-diff .stdout
|
||||
|
||||
event ssl_client_hello(c: connection, version: count, possible_ts: time, client_random: string, session_id: string, ciphers: count_set)
|
||||
event ssl_client_hello(c: connection, version: count, possible_ts: time, client_random: string, session_id: string, ciphers: index_vec)
|
||||
{
|
||||
print client_random;
|
||||
}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue