[Bro-Dev] [Bro-Commits] [git/bro] topic/bernhard/file-analysis-x509: Second try on the event interface. (7ba6bcf)

Seth Hall seth at icir.org
Fri Feb 28 06:37:27 PST 2014


On Feb 28, 2014, at 6:04 AM, Bernhard Amann <bernhard at ICSI.Berkeley.EDU> wrote:

> -event x509_extension(f: fa_file, ext: X509::Extension)
> +event x509_extension(f: fa_file, cert: X509::Certificate, ext: X509::Extension)

Would it make more sense to leave the cert out?  Seems like state we should collect in script land instead of passing it through from the core each time.

  .Seth


--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20140228/b20b2968/attachment.bin 


More information about the bro-dev mailing list