You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/etc
Richard McConnell 94c8be22d4 output/tls: Allow logging of cl-handshake params
Ticket: 6695

Add new custom log fields:

"client_handshake" which logs the following:
1. TLS version used during handshake
2. TLS extensions, excluding GREASE, SNI and ALPN
3. All cipher suites, excluding GREASE
4. All signature algorithms, excluding GREASE

The use-case is for logging TLS handshake parameters in order to survey
them, and so that JA4 hashes can be computed offline (in the case that
they're not already computed for the purposes of rule matching).
1 year ago
..
Makefile.am doc/userguide: generate eve documentation 2 years ago
classification.config classification: sync and update 6 years ago
reference.config config: Update reference keys 2 years ago
schema.json output/tls: Allow logging of cl-handshake params 1 year ago
suricata.logrotate.in logrotate: reindent to 4 spaces 6 years ago
suricata.service.in Sample systemd unit file for Suricata. 9 years ago