mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 07:08:19 +00:00
![]() That means that, for example, connections that are terminated with an alert during the handshake never appear in the ssl.log. This patch changes this behavior - now all ssl connections that fire any event are logged. The protocol confirmation of the ssl analyzer is moved to the client_hello instead to the server hello. Furthermore, an additional field is added to ssl.log, which indicates if a connection has been established or not (which probably indicates a handshake problem). |
||
---|---|---|
.. | ||
files | ||
frameworks | ||
misc | ||
protocols | ||
utils | ||
init-bare.bro | ||
init-default.bro |