[Bro-Dev] [JIRA] (BIT-1347) Please merge topic/johanna/tls

Johanna Amann (JIRA) jira at bro-tracker.atlassian.net
Wed Mar 18 13:03:00 PDT 2015


Johanna Amann created BIT-1347:
----------------------------------

             Summary: Please merge topic/johanna/tls
                 Key: BIT-1347
                 URL: https://bro-tracker.atlassian.net/browse/BIT-1347
             Project: Bro Issue Tracker
          Issue Type: Improvement
          Components: Bro
    Affects Versions: git/master
            Reporter: Johanna Amann
             Fix For: 2.4


Please merge topic/johanna/dtls

First and foremost, this branch brings DTLS 1.0 / 1.2 support to Bro. Dtls is mostly handled just like SSL. It emits the same events and thus works seamlessly with the current SSL scripts in the Bro core.

Furthermore, it implements TLS record layer defragmentation for the TLS Handshake protocol enabling us e.g. to deal with connections containing large certificates.

The analyzer is now split into three parts, a SSL/TLS analyzer, a DTLS analyzer and a TLS handshake protocol analyzer. The SSL/TLS and DTLS analyzer use a large amount of same code by including common pac-files.



--
This message was sent by Atlassian JIRA
(v6.4-OD-15-055#64014)


More information about the bro-dev mailing list