zeek/scripts/policy/protocols
Johanna Amann 95f1565498 Match DPD TLS signature on one-sided connections.
This commit changes DPD matching for TLS connections. A one-sided match
is enough to enable DPD now.

This commit also removes DPD for SSLv2 connections. SSLv2 connections do
basically no longer happen in the wild. SSLv2 is also really finnicky to
identify correctly - there is very little data required to match it, and
basically all matches today will be false positives. If DPD for SSLv2 is
still desired, the optional signature in policy/protocols/ssl/dpd-v2.sig
can be loaded.

Fixes GH-1952
2022-02-01 16:51:21 +00:00
..
conn update uses of "when" in base scripts to include captures 2022-01-07 14:53:33 -08:00
dhcp Remove deprecated functions/events 2019-05-02 12:06:39 -07:00
dns Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
ftp Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
http Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
krb Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
modbus Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
mqtt Support for log filter policy hooks 2020-09-30 12:32:45 -07:00
mysql Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
rdp Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
smb Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
smtp Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
ssh update uses of "when" in base scripts to include captures 2022-01-07 14:53:33 -08:00
ssl Match DPD TLS signature on one-sided connections. 2022-02-01 16:51:21 +00:00