[Bro-Dev] #209: topic/seth/ssl-analyzer-work - small patch SSLv3 for detect Extensions Length in bro v1.5.1
Bro Tracker
bro at tracker.icir.org
Fri Jan 28 13:41:27 PST 2011
#209: topic/seth/ssl-analyzer-work - small patch SSLv3 for detect Extensions
Length in bro v1.5.1
----------------------------+-----------------------------------
Reporter: rmkml | Owner:
Type: Merge Request | Status: seen
Priority: Normal | Milestone: Bro1.6
Component: Bro | Version: 1.5.2
Resolution: | Keywords: ssl extensions sprint
----------------------------+-----------------------------------
Comment (by seth):
One more thing in case anyone feels like looking into it is that the
"SSLProxy: Excessive small TCP Segment!" weird is still being thrown in
cases that I don't think it should be. It could be worth looking into.
It may have something to do with this (backward compatibility with SSL2.0
servers): http://tools.ietf.org/html/rfc5246#appendix-E.2
--
Ticket URL: <http://tracker.icir.org/bro/ticket/209#comment:7>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list