Project

General

Profile

Actions

Feature #1766

open

TLS keyword expansion

Added by Mats Klepsland over 5 years ago. Updated almost 2 years ago.

Status:
Assigned
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

Suricata should support more TLS keywords than it currently does. See TLS keyword expansion for more information of what I'm suggesting and add your comments here :)

Actions #1

Updated by Zach Rasmor over 5 years ago

I began a prototype to add the cipher suite to the JSON output - are you already planning to do this?

Actions #2

Updated by Mats Klepsland over 5 years ago

Yeah, this is already planned. The plan is to add custom TLS logging (both for tls-log and json-tls), and then start logging more as more TLS stuff is decoded when more TLS keywords are added. Logging cipher_suite from server_hello is on my todo.

Actions #3

Updated by Andreas Herz about 5 years ago

  • Target version set to TBD
Actions #4

Updated by Zach Rasmor over 4 years ago

Hello Mats - has there been any progress on the expanded logging, or should I resume my prototyping?

Actions #5

Updated by Victor Julien almost 2 years ago

  • Status changed from New to Assigned

Hi Mats, could you update the wiki doc to indicate what has been implemented?

Actions

Also available in: Atom PDF