diff --git a/CHANGES b/CHANGES index 6273a52362..601e5ca3ac 100644 --- a/CHANGES +++ b/CHANGES @@ -1,4 +1,11 @@ +3.1.0-dev.376 | 2020-01-14 09:45:45 -0800 + + * Fix warning when reading files from non-network sources (Seth Hall, Corelight) + + If files are being read from non-network sources, there was a warning in + the SSL base scripts about missing the f$conns field. + 3.1.0-dev.372 | 2020-01-13 12:10:42 +0000 * Fix method returning a reference to a temporary. Found by diff --git a/VERSION b/VERSION index 366ac4a582..290eaed209 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -3.1.0-dev.372 +3.1.0-dev.376 diff --git a/scripts/base/protocols/ssl/files.zeek b/scripts/base/protocols/ssl/files.zeek index fd3080b47d..d0349a0dae 100644 --- a/scripts/base/protocols/ssl/files.zeek +++ b/scripts/base/protocols/ssl/files.zeek @@ -92,7 +92,7 @@ event zeek_init() &priority=5 event file_sniff(f: fa_file, meta: fa_metadata) &priority=5 { - if ( |f$conns| != 1 ) + if ( ! f?$conns || |f$conns| != 1 ) return; if ( ! f?$info || ! f$info?$mime_type )