mirror of
https://github.com/zeek/zeek.git
synced 2025-10-04 15:48:19 +00:00
e1bcc4509f
Instead of having a big event, that tries to parse all the data into a huge datastructure, we do the more common thing and use a series of smaller events to parse requests and responses. The new events are: ocsp_request -> raised for an ocsp request, giving version and requestor ocsp_request_certificate -> raised n times per request, once per cert ocsp_response_status -> raised for each ocsp response, giving status ocsp_response_bytes -> raised for each ocsp response with information ocsp_response_certificate -> raised for each cert in an ocsp response
2 lines
27 B
Text
2 lines
27 B
Text
@load ./main
|
|
#@load ./ocsp
|