zeek/scripts/base/protocols/ssl
Jon Siwek 31f60853c9 GH-646: add new "successful_connection_remove" event
And switch Zeek's base scripts over to using it in place of
"connection_state_remove".  The difference between the two is
that "connection_state_remove" is raised for all events while
"successful_connection_remove" excludes TCP connections that were never
established (just SYN packets).  There can be performance benefits
to this change for some use-cases.

There's also a new event called ``connection_successful`` and a new
``connection`` record field named "successful" to help indicate this new
property of connections.
2019-11-11 19:52:59 -08:00
..
__load__.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
consts.zeek update SSL consts from TLS 1.3 2019-04-22 22:57:45 +02:00
ct-list.zeek Update Certificate Transparency list 2019-08-02 12:43:43 -07:00
dpd.sig SSL: update dpd signature for TLS1.3 2017-04-05 08:58:08 -07:00
files.zeek Merge remote-tracking branch 'origin/topic/seth/zeek_init' 2019-04-19 11:24:29 -07:00
main.zeek GH-646: add new "successful_connection_remove" event 2019-11-11 19:52:59 -08:00
mozilla-ca-list.zeek Update CA store to NSS 3.45 2019-08-02 12:36:54 -07:00
README SSL: Update OCSP/SCT scripts and documentation. 2017-07-27 16:22:40 -07:00

Support for Secure Sockets Layer (SSL)/Transport Layer Security(TLS) protocol analysis.