[Bro] Writing to SSL log

Azoff, Justin S jazoff at illinois.edu
Thu Sep 13 12:52:33 PDT 2018


> On Sep 13, 2018, at 3:46 PM, Neslog <neslog at gmail.com> wrote:
> 
> Justin, thanks!  I remember having to use a different before to log it.  I loaded up ssl and the following script but it's not firing off.
> 
> test.bro:
> 
> hook ssl_finishing(c: connection) {
>   print "SSL Finishing Event!";
> }
> 
> Is there much of a delay for this to execute?

Oh, that's what I get for not testing on 2.5.x.  That hook is new and will be in 2.6, for now you would need
to use the event ssl_established.


— 
Justin Azoff



More information about the Bro mailing list