zeek/scripts/base/protocols
Bernhard Amann 0d50b8b04f Change x509 log - now certificates are only logged once per hour.
Add parsing of several more types to SAN extension.

Make error messages of x509 file analyzer more useful.

Fix file ID generation.

You apparently have to be very careful which EndOfFile function of
the file analysis framework you call... otherwhise it might try
to close another file id. This took me quite a while to find.

addresses BIT-953, BIT-760, BIT-1150
2014-03-13 00:05:48 -07:00
..
conn Add README files for base/protocols 2013-10-17 12:47:32 -05:00
dhcp Integrate new Broxygen functionality into Sphinx. 2013-11-21 14:34:32 -06:00
dnp3 Add README files for base/protocols 2013-10-17 12:47:32 -05:00
dns Refactor DNS script's state management to improve performance. 2014-02-13 14:55:45 -06:00
ftp Add README files for base/protocols 2013-10-17 12:47:32 -05:00
http Revert "Expanding the HTTP methods used in the signature to detect HTTP traffic." 2014-02-13 12:49:46 -08:00
irc Add README files for base/protocols 2013-10-17 12:47:32 -05:00
modbus Add README files for base/protocols 2013-10-17 12:47:32 -05:00
pop3 Add README files for base/protocols 2013-10-17 12:47:32 -05:00
smtp Tweak to SMTP script to adjust for new string slicing behaviour. 2013-12-04 13:45:46 -08:00
socks Add README files for base/protocols 2013-10-17 12:47:32 -05:00
ssh Remove resp_size from the log. Refactor when we write out to the log a bit. Geodata now works reliably. 2013-11-05 11:58:00 -05:00
ssl Change x509 log - now certificates are only logged once per hour. 2014-03-13 00:05:48 -07:00
syslog Add README files for base/protocols 2013-10-17 12:47:32 -05:00
tunnels Moved DPD signatures into script specific directories. 2013-07-09 22:44:55 -04:00