[Bro] why x509_extensions event never called?

[Seth Hall]

On Jan 26, 2014, at 1:27 PM, Jessica Smith <jes.smith.bro at aol.com> wrote:

> event x509_extension(c: connection, is_orig: bool, data: string) 
> {
> 	print "THERE'S AN EXTENSION!";
> }

That looks correct.  You're going to have to give us more information and ideally a trace file.  Also, consider that if you aren't seeing certificates that have extensions you won't see this event fire.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140127/1b937d78/attachment.bin