Johanna Amann
6f9524e082
Make tunnel_parents in conn.log optional.
...
This makes conn.logs a bit prettier (and smaller) because all lines that
do not use a tunnel will now have a "-" instead of the "(empty)" for
tunnel_parents.
2018-01-12 13:46:00 -08:00
Johanna Amann
cdb6a1b6e6
Baseline updates after hash function change.
2016-07-13 10:11:37 -07:00
Johanna Amann
7f2087af34
also generate an event when starttls is encounterd for imap.
2015-07-23 12:37:40 -07:00
Johanna Amann
4a5737708c
Basic IMAP StartTLS analyzer.
...
Parses certificates out of imap connections using StartTLS. Aborts
processing if StartTLS is not found.
2015-07-22 10:35:49 -07:00