[Bro-Dev] [Bro-Commits] [git/bro] topic/bernhard/file-analysis-x509: Second try on the event interface. (7ba6bcf)
seth at icir.org
Fri Feb 28 06:37:27 PST 2014
On Feb 28, 2014, at 6:04 AM, Bernhard Amann <bernhard at ICSI.Berkeley.EDU> wrote:
> -event x509_extension(f: fa_file, ext: X509::Extension)
> +event x509_extension(f: fa_file, cert: X509::Certificate, ext: X509::Extension)
Would it make more sense to leave the cert out? Seems like state we should collect in script land instead of passing it through from the core each time.
International Computer Science Institute
(Bro) because everyone has a network
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20140228/b20b2968/attachment.bin
More information about the bro-dev