[Bro] why x509_extensions event never called?
seth at icir.org
Mon Jan 27 07:02:39 PST 2014
On Jan 26, 2014, at 1:27 PM, Jessica Smith <jes.smith.bro at aol.com> wrote:
> event x509_extension(c: connection, is_orig: bool, data: string)
> print "THERE'S AN EXTENSION!";
That looks correct. You're going to have to give us more information and ideally a trace file. Also, consider that if you aren't seeing certificates that have extensions you won't see this event fire.
International Computer Science Institute
(Bro) because everyone has a network
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140127/1b937d78/attachment.bin
More information about the Bro