zeek/scripts/policy/protocols
Johanna Amann eb50b3fed1 Change end-of-connection handling for validation
Move from using CCS (before: established) to just doing certificate
validation at the end of the connection.

This is (again) more robust in the case of aborted connection. I am
moving this into a hook because of the complexity of the
end-of-connection handling for SSL.

This should probably be extended to not just handle SSL validation, but
all other logging constructs that are currently called in _established.
2017-05-11 22:50:20 -07:00
..
conn Fix minor typos in documentation 2016-11-14 09:50:19 -06:00
dhcp Fix typos and formatting in the policy/protocols docs 2013-10-21 02:34:28 -05:00
dns Rewrite DNS state tracking which matches queries and replies. 2014-01-30 17:21:01 -06:00
ftp Fix typos and formatting in the policy/protocols docs 2013-10-21 02:34:28 -05:00
http Merge branch 'topic/jgras/flash-detection' of https://github.com/J-Gras/bro 2015-07-27 11:05:49 -07:00
krb Refactor base krb scripts and update tests. 2017-02-18 13:55:39 -05:00
modbus Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
mysql Merge remote-tracking branch 'origin/topic/vladg/mysql' 2014-11-11 11:49:26 -08:00
rdp New script to add a field to rdp.log when the connection is upgraded to SSL. 2015-03-04 14:50:41 -05:00
smb Add missing paths to SMM Log::create_streams calls 2017-01-12 13:45:39 +01:00
smtp SMTP does not need to pull in the notice framework. 2016-06-23 13:22:16 -07:00
ssh Ensure that the notice uid field is filled in. 2016-09-19 22:11:31 -04:00
ssl Change end-of-connection handling for validation 2017-05-11 22:50:20 -07:00