[Bro-Dev] #695: ssl_extension event doesn't indicate originator
Bro Tracker
bro at tracker.bro-ids.org
Tue Nov 22 09:07:57 PST 2011
#695: ssl_extension event doesn't indicate originator
---------------------+--------------------
Reporter: seth | Owner: seth
Type: Problem | Status: new
Priority: Normal | Milestone: Bro2.0
Component: Bro | Version:
Keywords: |
---------------------+--------------------
I forgot to include which side of the connection sent an ssl_extension.
The ssl_alert, x509_extension, and x509_error events need similar fields
added as well.
The fields should probably be named consistently with the other analyzer
generated events as well (is_orig). The x509_certificate event uses
inconsistent naming (is_server) and should probably be renamed too.
--
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/695>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker
More information about the bro-dev
mailing list