[Bro] Does x509.log contain the raw certificate?

anthony kasza anthony.kasza at gmail.com
Sat Nov 19 15:06:21 PST 2016

The certificates are not contained in any log file, just certificate meta
data. To enable certificate extraction you need to enable the files
framework which will write certificates to disk.


On Nov 19, 2016 2:53 PM, "Robert Harrelson" <bobharrelsons at gmail.com> wrote:

> The log file x509.log contains parsed information from the X.509
> certificate. However, I would like to know if the x509.log file contains
> the raw X.509 certificate itself. If yes, how do I extract the certificate
> from the log, not in real-time? Thanks
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20161119/f1cec3bb/attachment.html 

More information about the Bro mailing list