Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add record layer version to event ssl_encrypted_data.

Browse source 
This exposes the record layer version of the fragment in addition to the
content type and the length. The ordering of the arguments in the event
is the same as the ordering in the protocol message (first type, then
version, then length).

This also includes a slight change to the analyzer, no longer calling
the generate function if the event is not used.
This commit is contained in:
Johanna Amann 2017-02-03 12:27:40 -08:00
parent f721c74bad
commit c05e07cc90
9 changed files with 71 additions and 47 deletions
Download patch file Download diff file Expand all files Collapse all files

70
testing/btest/Baseline/scripts.base.protocols.ssl.handshake-events/.stdout
View file

@ -5,41 +5,41 @@ Handshake, 192.168.1.105, 74.125.224.79, F, 12, 199
Handshake, 192.168.1.105, 74.125.224.79, F, 14, 0
Handshake, 192.168.1.105, 74.125.224.79, T, 16, 66
CCS, 192.168.1.105, 74.125.224.79, T
Encrypted data, 192.168.1.105, 74.125.224.79, T, 22, 72
Encrypted data, 192.168.1.105, 74.125.224.79, T, 23, 48
Encrypted data, 192.168.1.105, 74.125.224.79, T, 23, 387
Encrypted data, 192.168.1.105, 74.125.224.79, T, TLSv10, 22, 72
Encrypted data, 192.168.1.105, 74.125.224.79, T, TLSv10, 23, 48
Encrypted data, 192.168.1.105, 74.125.224.79, T, TLSv10, 23, 387
Handshake, 192.168.1.105, 74.125.224.79, F, 4, 170
CCS, 192.168.1.105, 74.125.224.79, F
Established, 192.168.1.105, 74.125.224.79
Encrypted data, 192.168.1.105, 74.125.224.79, F, 22, 36
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 40
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 248
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 28
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 1312
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 1345
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 1345
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 161
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 33
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 28
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 1312
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 1345
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 1345
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 148
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 46
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 28
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 1312
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 1345
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 1345
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 135
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 59
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 28
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 1312
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 1345
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 245
Encrypted data, 192.168.1.105, 74.125.224.79, T, 23, 32
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 32
Encrypted data, 192.168.1.105, 74.125.224.79, T, 23, 92
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 75
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 28
Encrypted data, 192.168.1.105, 74.125.224.79, T, 23, 32
Encrypted data, 192.168.1.105, 74.125.224.79, F, 23, 32
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 22, 36
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 40
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 248
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 28
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 1312
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 1345
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 1345
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 161
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 33
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 28
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 1312
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 1345
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 1345
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 148
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 46
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 28
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 1312
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 1345
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 1345
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 135
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 59
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 28
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 1312
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 1345
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 245
Encrypted data, 192.168.1.105, 74.125.224.79, T, TLSv10, 23, 32
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 32
Encrypted data, 192.168.1.105, 74.125.224.79, T, TLSv10, 23, 92
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 75
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 28
Encrypted data, 192.168.1.105, 74.125.224.79, T, TLSv10, 23, 32
Encrypted data, 192.168.1.105, 74.125.224.79, F, TLSv10, 23, 32