[Bro] Subclassing from SSL Analyzer

[Seth Hall]

> On Jun 18, 2015, at 9:38 AM, Alec Waters <Alec.Waters at dataline.co.uk> wrote:
> 
> Even if you've got the key, isn't the analyser going to be stymied in the
> presence of Diffie-Hellman in the cipher suite?

Yep, SSL/TLS decryption is far from a panacea.  It is a neat example in the analyzer though and I think we can do it more cleanly than I’ve seen most other projects do it (and make it easier to use!).

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150618/08a0ba3c/attachment.bin