Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
zeek/scripts/base/protocols/imap
History
Johanna Amann 4a5737708c Basic IMAP StartTLS analyzer. 
Parses certificates out of imap connections using StartTLS. Aborts
processing if StartTLS is not found.
2015-07-22 10:35:49 -07:00
..
__load__.bro Basic IMAP StartTLS analyzer. 2015-07-22 10:35:49 -07:00
main.bro Basic IMAP StartTLS analyzer. 2015-07-22 10:35:49 -07:00
README Basic IMAP StartTLS analyzer. 2015-07-22 10:35:49 -07:00

README 

Support for the Internet Message Access Protocol (IMAP).

Note that currently the IMAP analyzer only supports analyzing IMAP sessions
until they do or do not switch to TLS using StartTLS. Hence, we do not get
mails from IMAP sessions, only X509 certificates.