zeek/scripts/base
Robin Sommer 201fc7b25a Merge remote-tracking branch 'origin/topic/bernhard/ssl-analyzer'
* origin/topic/bernhard/ssl-analyzer:
  Fix a few failing tests
  Add very basic ocsp stapling support.
  Add documentation, consts and tests for the new events.
  Support parsing of several TLS extensions.
  Make SSL/TLS version detection less brittle.
  Nicer notices for heartbleed.
  rip out state handline from ssl analyzer.
  enable detection of encrypted heartbleeds.
  also extract payload data in ssl_heartbeat
  add to local.bro, add disclaimer
  make tls heartbeat messages a bit better.
  fix tabs.
  polish script and probably detect encrypted attacks too.
  detect and alert on simple case of heartbleed
  default to TLS when not being able to determine version
  add is_orig to heartbeat event
  Throw new event for heartbeat messages.

BIT-1178 #merged
2014-04-24 17:04:56 -07:00
..
files Merge remote-tracking branch 'origin/topic/bernhard/file-analysis-x509' 2014-03-14 09:53:07 -07:00
frameworks Support parsing of several TLS extensions. 2014-04-23 14:34:06 -07:00
misc Add script to detect filtered TCP traces, addresses BIT-1119. 2014-01-31 17:04:58 -06:00
protocols Merge remote-tracking branch 'origin/topic/bernhard/ssl-analyzer' 2014-04-24 17:04:56 -07:00
utils Return the Dir module to file name tracking instead of inode tracking. 2013-10-29 11:09:55 -04:00
init-bare.bro Merge remote-tracking branch 'origin/topic/jsiwek/snmp' 2014-04-08 15:31:03 -07:00
init-default.bro Merge remote-tracking branch 'origin/topic/jsiwek/snmp' 2014-04-08 15:31:03 -07:00