[Bro-Dev] [Bro-Commits] [git/bro] topic/bernhard/file-analysis-x509: Second try on the event interface. (7ba6bcf)

Seth Hall seth at icir.org
Fri Feb 28 06:37:27 PST 2014

On Feb 28, 2014, at 6:04 AM, Bernhard Amann <bernhard at ICSI.Berkeley.EDU> wrote:

> -event x509_extension(f: fa_file, ext: X509::Extension)
> +event x509_extension(f: fa_file, cert: X509::Certificate, ext: X509::Extension)

Would it make more sense to leave the cert out?  Seems like state we should collect in script land instead of passing it through from the core each time.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20140228/b20b2968/attachment.bin 

More information about the bro-dev mailing list