zeek/scripts
Johanna Amann a6edbf8bcd Fix parsing of version field in SSLv2 client hello
It turns out that, for probably a long time, we have reported an
incorrect version when parsing an SSLv2 client hello. We always reported
this as SSLv2, no matter which version the client hello actually
contained.

This bug probably went unnoticed for a long time, as SSLv2 is
essentially unused nowadays, and as this field does not show up in the
default logs.

This was found due to a baseline difference when writing the Spicy SSL
analyzer.
2024-08-22 13:14:24 +01:00
..
base Fix parsing of version field in SSLv2 client hello 2024-08-22 13:14:24 +01:00
policy Add packet analyzer history 2024-08-12 12:21:00 +02:00
site telemetry: Deprecate prometheus.zeek policy script 2024-07-21 17:49:21 +02:00
spicy Remove deprecated port/ports fields for spicy analyzers 2024-08-07 11:58:22 -07:00
zeekygen test-all-policy: Do not load iso-9660.zeek 2024-02-26 17:58:26 +01:00
CMakeLists.txt Use the same rules as cmake submodule to reformat Zeek 2023-05-09 08:31:43 -07:00
test-all-policy.zeek Remove deprecated load-balacing policy script 2024-08-07 11:58:21 -07:00