%%{ #include #include "zeek/analyzer/protocol/ssl/SSL.h" #include "zeek/Reporter.h" %%} ## Sets if the SSL analyzer should consider the connection established (handshake ## finished succesfully). ## ## c: The SSL connection. function set_ssl_established%(c: connection%): any %{ zeek::analyzer::Analyzer* sa = c->FindAnalyzer("SSL"); if ( sa ) static_cast(sa)->StartEncryption(); return nullptr; %}