[Bro-Dev] #209: topic/seth/ssl-analyzer-work - small patch SSLv3 for detect Extensions Length in bro v1.5.1

Bro Tracker bro at tracker.icir.org
Fri Jan 28 13:41:27 PST 2011


#209: topic/seth/ssl-analyzer-work - small patch SSLv3 for detect Extensions
Length in bro v1.5.1
----------------------------+-----------------------------------
  Reporter:  rmkml          |      Owner:
      Type:  Merge Request  |     Status:  seen
  Priority:  Normal         |  Milestone:  Bro1.6
 Component:  Bro            |    Version:  1.5.2
Resolution:                 |   Keywords:  ssl extensions sprint
----------------------------+-----------------------------------

Comment (by seth):

 One more thing in case anyone feels like looking into it is that the
 "SSLProxy: Excessive small TCP Segment!" weird is still being thrown in
 cases that I don't think it should be.  It could be worth looking into.
 It may have something to do with this (backward compatibility with SSL2.0
 servers): http://tools.ietf.org/html/rfc5246#appendix-E.2

-- 
Ticket URL: <http://tracker.icir.org/bro/ticket/209#comment:7>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list