zeek/scripts/base
Bernhard Amann 0d50b8b04f Change x509 log - now certificates are only logged once per hour.
Add parsing of several more types to SAN extension.

Make error messages of x509 file analyzer more useful.

Fix file ID generation.

You apparently have to be very careful which EndOfFile function of
the file analysis framework you call... otherwhise it might try
to close another file id. This took me quite a while to find.

addresses BIT-953, BIT-760, BIT-1150
2014-03-13 00:05:48 -07:00
..
files Change x509 log - now certificates are only logged once per hour. 2014-03-13 00:05:48 -07:00
frameworks Merge remote-tracking branch 'origin/topic/jazoff/notice_file_info' 2014-01-20 12:01:44 -08:00
misc Add script to detect filtered TCP traces, addresses BIT-1119. 2014-01-31 17:04:58 -06:00
protocols Change x509 log - now certificates are only logged once per hour. 2014-03-13 00:05:48 -07:00
utils Return the Dir module to file name tracking instead of inode tracking. 2013-10-29 11:09:55 -04:00
init-bare.bro Change x509 log - now certificates are only logged once per hour. 2014-03-13 00:05:48 -07:00
init-default.bro X509 file analyzer nearly done. Verification and most other policy scripts 2014-03-03 17:07:50 -08:00