Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Spicy TLS: More TLS 1.3 parsing

Browse source
This commit is contained in:
Johanna Amann 2023-04-25 14:53:02 +01:00
parent 82bcc2dbb3
commit dc46dbe645
3 changed files with 177 additions and 64 deletions
Download patch file Download diff file Expand all files Collapse all files

12
scripts/base/protocols/ssl/dpd.sig
View file

@ -14,9 +14,9 @@ signature dpd_tls_client {
enable "tls"
}
# signature dpd_dtls_client {
# ip-proto == udp
# # Client hello.
# payload /^\x16\xfe[\xff\xfd]\x00\x00\x00\x00\x00\x00\x00...\x01...........\xfe[\xff\xfd].*/
# enable "dtls"
# }
signature dpd_dtls_client {
ip-proto == udp
# Client hello.
payload /^\x16\xfe[\xff\xfd]\x00\x00\x00\x00\x00\x00\x00...\x01...........\xfe[\xff\xfd].*/
enable "dtls"
}