zeek/scripts/base/protocols
Robin Sommer ed4cd9352a Merge remote-tracking branch 'origin/topic/bernhard/even-more-ssl-changes'
Good stuff! (but I admit I didn't look at the OpenSSL code too closely :)

* origin/topic/bernhard/even-more-ssl-changes:
  small test update & script fix
  update baselines & add ocsp leak check
  Add policy script adding ocsp validation to ssl.log
  Implement verification of OCSP replies.
  Add tls flag to smtp.log. Will be set if a connection switched to startls.
  add starttls support for pop3
  Add smtp starttls support
  Replace errors when parsing x509 certs with weirds (as requested by Seth).
  move tls content types from heartbleed to consts.bro. Seems better to put them there...
  Add new features from other branch to the heartbleed-detector (and clean them up).
  Let TLS analyzer fail better when no longer in sync with the data stream. The version field in each record-layer packet is now re-checked.

BIT-1190 #merged

Conflicts:
	testing/btest/Baseline/scripts.policy.misc.dump-events/all-events.log
	testing/btest/Baseline/scripts.policy.misc.dump-events/smtp-events.log
2014-05-16 14:45:25 -07:00
..
conn Add README files for base/protocols 2013-10-17 12:47:32 -05:00
dhcp Integrate new Broxygen functionality into Sphinx. 2013-11-21 14:34:32 -06:00
dnp3 Add README files for base/protocols 2013-10-17 12:47:32 -05:00
dns BIT-1156: Fix parsing of DNS TXT RRs w/ multiple character-strings. 2014-04-24 16:20:01 -05:00
ftp Add README files for base/protocols 2013-10-17 12:47:32 -05:00
http File type detection changes and fix https.log {orig,resp}_fuids fields. 2014-03-25 12:44:11 -05:00
irc Fix missing "irc-dcc-data" service field from IRC DCC connections. 2014-05-01 14:08:07 -05:00
modbus Add README files for base/protocols 2013-10-17 12:47:32 -05:00
pop3 Add README files for base/protocols 2013-10-17 12:47:32 -05:00
radius Merge remote-tracking branch 'origin/topic/vladg/radius' into topic/robin/radius-merge 2014-05-15 11:39:05 -07:00
smtp Merge remote-tracking branch 'origin/topic/bernhard/even-more-ssl-changes' 2014-05-16 14:45:25 -07:00
snmp Clean up base SNMP script. Mostly docs, some logic refactors. 2014-05-02 12:36:02 -05:00
socks Add README files for base/protocols 2013-10-17 12:47:32 -05:00
ssh Remove resp_size from the log. Refactor when we write out to the log a bit. Geodata now works reliably. 2013-11-05 11:58:00 -05:00
ssl Merge remote-tracking branch 'origin/topic/bernhard/even-more-ssl-changes' 2014-05-16 14:45:25 -07:00
syslog Add README files for base/protocols 2013-10-17 12:47:32 -05:00
tunnels Moved DPD signatures into script specific directories. 2013-07-09 22:44:55 -04:00