[Bro-Dev] #695: ssl_extension event doesn't indicate originator

Bro Tracker bro at tracker.bro-ids.org
Tue Nov 22 09:07:57 PST 2011


#695: ssl_extension event doesn't indicate originator
---------------------+--------------------
 Reporter:  seth     |      Owner:  seth
     Type:  Problem  |     Status:  new
 Priority:  Normal   |  Milestone:  Bro2.0
Component:  Bro      |    Version:
 Keywords:           |
---------------------+--------------------
 I forgot to include which side of the connection sent an ssl_extension.
 The ssl_alert, x509_extension, and x509_error events need similar fields
 added as well.

 The fields should probably be named consistently with the other analyzer
 generated events as well (is_orig).  The x509_certificate event uses
 inconsistent naming (is_server) and should probably be renamed too.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/695>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list