[Bro] Small patch SSLv3 for detect Extensions Length in bro v1.5.1

rmkml rmkml at free.fr
Mon Dec 28 09:42:32 PST 2009


Hi,
I have created a small patch (joigned) for detecting SSLv3(.cc) Extensions Length in bro v1.5.1.
Previous patch, connect on https web site with extensions (server_name for example) generate alert:
  ssl.log:timestamp ** a.b.c.d/59973 > w.x.y.z/https: SSLv3x: Corrupt length fields in Client hello!
Regards
Rmkml
Crusoe-Researches.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: bro151srcsslv3_extensionslength.diff.gz
Type: application/octet-stream
Size: 409 bytes
Desc: 
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20091228/942aa9ef/attachment.obj 


More information about the Bro mailing list