zeek/scripts/base/protocols/ssl
Johanna Amann c92bf9bad2 Introduce ssl_plaintext_data event.
This event is the replacement for ssl_application_data, which is removed
in the same commit. It is more generic, containing more information than
ssl_application_dataand is raised for all SSL/TLS messages that are
exchanged before encryption starts.

It is used by Bro internally to determine when a TLS1.3 session has been
completely established. Apart from that, it can be used to, e.g.,
determine the record layer TLS version.
2017-02-03 13:58:26 -08:00
..
__load__.bro Very basic file-analyzer for x509 certificates. Mostly ripped from 2013-09-16 14:08:22 -07:00
consts.bro Add new TLS extension type (cached_info) 2017-01-19 13:22:34 -08:00
dpd.sig Extend ssl dpd signature to allow alert before server_hello. 2015-10-22 13:36:21 -07:00
files.bro Fix minor typos in documentation of various scripts 2016-11-11 14:08:17 -06:00
main.bro Introduce ssl_plaintext_data event. 2017-02-03 13:58:26 -08:00
mozilla-ca-list.bro Update Mozilla CA list. 2016-08-10 09:21:46 -07:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00

Support for Secure Sockets Layer (SSL) protocol analysis.