mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
![]() It turns out that, for probably a long time, we have reported an incorrect version when parsing an SSLv2 client hello. We always reported this as SSLv2, no matter which version the client hello actually contained. This bug probably went unnoticed for a long time, as SSLv2 is essentially unused nowadays, and as this field does not show up in the default logs. This was found due to a baseline difference when writing the Spicy SSL analyzer. |
||
---|---|---|
.. | ||
__load__.zeek | ||
consts.zeek | ||
ct-list.zeek | ||
dpd.sig | ||
files.zeek | ||
main.zeek | ||
mozilla-ca-list.zeek | ||
README |
Support for Secure Sockets Layer (SSL)/Transport Layer Security(TLS) protocol analysis.