mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
ea1616bed5
That means that, for example, connections that are terminated with an alert during the handshake never appear in the ssl.log. This patch changes this behavior - now all ssl connections that fire any event are logged. The protocol confirmation of the ssl analyzer is moved to the client_hello instead to the server hello. Furthermore, an additional field is added to ssl.log, which indicates if a connection has been established or not (which probably indicates a handshake problem). |
||
|---|---|---|
| .. | ||
| conn | ||
| dhcp | ||
| dnp3 | ||
| dns | ||
| ftp | ||
| http | ||
| irc | ||
| modbus | ||
| smtp | ||
| socks | ||
| ssl | ||
| syslog | ||