Robin Sommer 201fc7b25a Merge remote-tracking branch 'origin/topic/bernhard/ssl-analyzer' ... * origin/topic/bernhard/ssl-analyzer: Fix a few failing tests Add very basic ocsp stapling support. Add documentation, consts and tests for the new events. Support parsing of several TLS extensions. Make SSL/TLS version detection less brittle. Nicer notices for heartbleed. rip out state handline from ssl analyzer. enable detection of encrypted heartbleeds. also extract payload data in ssl_heartbeat add to local.bro, add disclaimer make tls heartbeat messages a bit better. fix tabs. polish script and probably detect encrypted attacks too. detect and alert on simple case of heartbleed default to TLS when not being able to determine version add is_orig to heartbeat event Throw new event for heartbeat messages. BIT-1178 #merged		2014-04-24 17:04:56 -07:00
..
conn	Fix typos and formatting in the policy/protocols docs	2013-10-21 02:34:28 -05:00
dhcp	Fix typos and formatting in the policy/protocols docs	2013-10-21 02:34:28 -05:00
dns	Rewrite DNS state tracking which matches queries and replies.	2014-01-30 17:21:01 -06:00
ftp	Fix typos and formatting in the policy/protocols docs	2013-10-21 02:34:28 -05:00
http	Fix typos and formatting in the policy/protocols docs	2013-10-21 02:34:28 -05:00
modbus	Fix typos and formatting in the policy/protocols docs	2013-10-21 02:34:28 -05:00
smtp	Fix typos and formatting in the policy/protocols docs	2013-10-21 02:34:28 -05:00
ssh	Fix resp_size in ssh.log, require a minimum resp_size for the heuristic. Some work on geodata, but still a WIP.	2013-11-05 11:34:32 -05:00
ssl	Merge remote-tracking branch 'origin/topic/bernhard/ssl-analyzer'	2014-04-24 17:04:56 -07:00