zeek/scripts/base/protocols
Johanna Amann eb50b3fed1 Change end-of-connection handling for validation
Move from using CCS (before: established) to just doing certificate
validation at the end of the connection.

This is (again) more robust in the case of aborted connection. I am
moving this into a hook because of the complexity of the
end-of-connection handling for SSL.

This should probably be extended to not just handle SSL validation, but
all other logging constructs that are currently called in _established.
2017-05-11 22:50:20 -07:00
..
conn Merge remote-tracking branch 'origin/topic/robin/history-rxmit' 2016-07-08 19:30:10 -07:00
dce-rpc Fixed some warnings seen while running "make doc" 2016-11-14 14:46:53 -06:00
dhcp Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
dnp3 Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
dns Rewrite weird logging. 2016-06-15 13:49:35 -07:00
ftp Fixing FTP cwd getting overlue long. 2016-05-29 08:52:47 -07:00
http Fix minor typos in documentation of various scripts 2016-11-11 14:08:17 -06:00
imap Basic IMAP StartTLS analyzer. 2015-07-22 10:35:49 -07:00
irc File API updates complete. 2015-04-20 10:46:48 -04:00
krb Merge remote-tracking branch 'origin/master' into topic/johanna/ocsp-new 2017-03-16 12:28:08 -07:00
modbus Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
mysql Add missing documentation on the "Bro Package Index" page 2015-06-02 10:00:00 -05:00
ntlm Added missing README files for documentation 2016-10-10 22:55:50 -05:00
pop3 Add README files for base/protocols 2013-10-17 12:47:32 -05:00
radius Rework the RADIUS base script. 2017-02-20 00:07:14 -05:00
rdp Allow File analyzers to direcly pass mime type. 2017-02-10 17:03:33 -08:00
rfb Fix minor typos in documentation of various scripts 2016-11-11 14:08:17 -06:00
sip Add some missing Bro script documentation 2016-05-05 16:35:31 -05:00
smb Fix minor typos in documentation of various scripts 2016-11-11 14:08:17 -06:00
smtp SMTP does not need to pull in the notice framework. 2016-06-23 13:22:16 -07:00
snmp Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
socks Changing protocol_{confirmation,violation} events to queue like any 2016-05-27 13:19:04 -07:00
ssh Merge remote-tracking branch 'origin/topic/vladg/bit-1641' 2016-10-18 21:57:27 -04:00
ssl Change end-of-connection handling for validation 2017-05-11 22:50:20 -07:00
syslog Add some missing Bro script documentation 2016-05-05 16:35:31 -05:00
tunnels Added missing README files for documentation 2016-10-10 22:55:50 -05:00
xmpp Add xmpp dpd sig and fix a few parsing problems for connections that do 2015-07-21 13:20:35 -07:00