Johanna Amann e58b03a43f Add policy script suppressing certificate events ... The added disable-certificate-events-known-certs.zeek disables repeated X509 events in SSL connections, given that the connection terminates at the same server and used the samt SNI as a previously seen connection with the same certificate. For people that see significant amounts of TLS 1.2 traffic, this could reduce the amount of raised events significantly - especially when a lot of connections are repeat connections to the same servers. The practical impact of not raising these events is actually very little - unless a script directly interacts with the x509 events, everything works as before - the x509 variables in the connection records are still being set (from the cache).		2021-06-29 11:39:18 +01:00
..
files	Add policy script suppressing certificate events	2021-06-29 11:39:18 +01:00
frameworks	GH-1517: Add Geneve decap support	2021-04-27 11:21:29 +02:00
misc	Tweak find-filtered-trace to not flag traces if they have non-TCP	2020-09-25 11:29:44 +00:00
packet-protocols	GH-1389: Skip VN-Tag headers	2021-02-01 14:34:56 -07:00
protocols	Change SSL and X.509 logging format	2021-06-29 09:26:43 +01:00
utils	lint fixes: ensuring functions return values, robustness to nil Val's	2021-03-18 08:21:19 -07:00
init-bare.zeek	GH-1517: Add Geneve decap support	2021-04-27 11:21:29 +02:00
init-default.zeek	Add backtrace() and print_backtrace()	2020-07-03 14:09:31 -07:00
init-frameworks-and-bifs.zeek	GH-1122: Allow initializing globals with calls to subdir BIFs	2020-08-27 12:20:37 -07:00