Hi, why the "ticket" value is always empty or NULL? event ssl_session_ticket_handshake(c: connection, ticket_lifetime_hint: count, ticket: string) { print fmt("%s", ticket); } -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140305/1f14ab33/attachment.html