From d9ed76c90a899b852d9b33adc96cf1a6741b6dba Mon Sep 17 00:00:00 2001 From: Seth Hall Date: Tue, 14 Jan 2020 10:53:02 -0500 Subject: [PATCH] Fix warning when reading files from non-network sources If files are being read from non-network sources, there was a warning in the SSL base scripts about missing the f$conns field. --- scripts/base/protocols/ssl/files.zeek | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/base/protocols/ssl/files.zeek b/scripts/base/protocols/ssl/files.zeek index fd3080b47d..d0349a0dae 100644 --- a/scripts/base/protocols/ssl/files.zeek +++ b/scripts/base/protocols/ssl/files.zeek @@ -92,7 +92,7 @@ event zeek_init() &priority=5 event file_sniff(f: fa_file, meta: fa_metadata) &priority=5 { - if ( |f$conns| != 1 ) + if ( ! f?$conns || |f$conns| != 1 ) return; if ( ! f?$info || ! f$info?$mime_type )