Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 22:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
zeek/scripts/base/protocols/ssl
History
Bernhard Amann ea1616bed5 At the moment, SSL connections where the ssl_established event does not fire are not logged. 
That means that, for example, connections that are terminated with an alert during the
handshake never appear in the ssl.log.

This patch changes this behavior - now all ssl connections that fire any event are logged.

The protocol confirmation of the ssl analyzer is moved to the client_hello instead to
the server hello. Furthermore, an additional field is added to ssl.log, which indicates
if a connection has been established or not (which probably indicates a handshake problem).
2014-03-04 14:23:49 -08:00
..
__load__.bro Documentation fixes. 2013-09-03 15:59:40 -05:00
consts.bro More google tls extensions that are being actively used. 2014-02-24 12:56:06 -08:00
dpd.sig Moved DPD signatures into script specific directories. 2013-07-09 22:44:55 -04:00
main.bro At the moment, SSL connections where the ssl_established event does not fire are not logged. 2014-03-04 14:23:49 -08:00
mozilla-ca-list.bro Update mozilla root bundle 2014-02-28 03:40:18 -08:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00

README 

Support for Secure Sockets Layer (SSL) protocol analysis.