mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
ea1616bed5
That means that, for example, connections that are terminated with an alert during the handshake never appear in the ssl.log. This patch changes this behavior - now all ssl connections that fire any event are logged. The protocol confirmation of the ssl analyzer is moved to the client_hello instead to the server hello. Furthermore, an additional field is added to ssl.log, which indicates if a connection has been established or not (which probably indicates a handshake problem).
2 lines
101 B
Text
2 lines
101 B
Text
# @TEST-EXEC: bro -r $TRACES/tls-1.2-handshake-failure.trace %INPUT
|
|
# @TEST-EXEC: btest-diff ssl.log
|