wader/fq
1
1
Fork 0
mirror of https://github.com/wader/fq.git synced 2024-09-11 20:07:11 +03:00
Code Issues Projects Releases Wiki Activity

Merge pull request #839 from wader/tls-fix-typos

Browse Source 
tls: Fix field name typos
This commit is contained in:
Mattias Wadman 2023-12-25 00:45:35 +01:00 committed by GitHub
commit 89be298d8a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
73 changed files with 189 additions and 189 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
format/pcap/testdata/many_interfaces.fqtest vendored
View File

@ -5567,7 +5567,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | [0]{}: extension 0x74-0x90 (28)
0x007| 00 00 | .. | type: "server_name" (0) 0x74-0x76 (2)
0x007| 00 18 | .. | length: 24 0x76-0x78 (2)
0x007| 00 16 | .. | serer_names_length: 22 0x78-0x7a (2)
0x007| 00 16 | .. | server_names_length: 22 0x78-0x7a (2)
| | | server_names[0:1]: 0x7a-0x90 (22)
| | | [0]{}: server_name 0x7a-0x90 (22)
0x007| 00 | . | type: 0 0x7a-0x7b (1)
@ -5586,7 +5586,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | [3]{}: extension 0x14c-0x166 (26)
0x014| 00 0d | .. | type: "signature_algorithms" (13) 0x14c-0x14e (2)
0x014| 00 16| ..| length: 22 0x14e-0x150 (2)
0x015|00 14 |.. | signature_algorithm_length: 20 0x150-0x152 (2)
0x015|00 14 |.. | signature_algorithms_length: 20 0x150-0x152 (2)
| | | signature_algorithms[0:10]: 0x152-0x166 (20)
| | | [0]{}: signature_algorithm 0x152-0x154 (2)
0x015| 06 | . | hash: "sha512" (6) 0x152-0x153 (1)
@ -5632,7 +5632,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | [7]{}: extension 0x177-0x198 (33)
0x017| 00 10 | .. | type: "application_layer_protocol_negotiation" (16) 0x177-0x179 (2)
0x017| 00 1d | .. | length: 29 0x179-0x17b (2)
0x017| 00 1b | .. | serer_names_length: 27 0x17b-0x17d (2)
0x017| 00 1b | .. | protocols_length: 27 0x17b-0x17d (2)
| | | protocols[0:4]: 0x17d-0x198 (27)
| | | [0]{}: protocol 0x17d-0x186 (9)
0x017| 08 | . | length: 8 0x17d-0x17e (1)
@ -5650,13 +5650,13 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | [8]{}: extension 0x198-0x19e (6)
0x019| 00 0b | .. | type: "ec_point_formats" (11) 0x198-0x19a (2)
0x019| 00 02 | .. | length: 2 0x19a-0x19c (2)
0x019| 01 | . | ex_points_format_length: 1 0x19c-0x19d (1)
0x019| 01 | . | ex_points_formats_length: 1 0x19c-0x19d (1)
| | | ex_points_formats[0:1]: 0x19d-0x19e (1)
0x019| 00 | . | [0]: 0x0 ex_points_format 0x19d-0x19e (1)
| | | [9]{}: extension 0x19e-0x1a8 (10)
0x019| 00 0a| ..| type: "supported_groups" (10) 0x19e-0x1a0 (2)
0x01a|00 06 |.. | length: 6 0x1a0-0x1a2 (2)
0x01a| 00 04 | .. | supported_group_length: 4 0x1a2-0x1a4 (2)
0x01a| 00 04 | .. | supported_groups_length: 4 0x1a2-0x1a4 (2)
| | | supported_groups[0:2]: 0x1a4-0x1a8 (4)
0x01a| 00 17 | .. | [0]: 0x17 supported_group 0x1a4-0x1a6 (2)
0x01a| 00 18 | .. | [1]: 0x18 supported_group 0x1a6-0x1a8 (2)
@ -5757,7 +5757,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | [1]{}: extension 0x56-0x5f (9)
0x005| 00 10 | .. | type: "application_layer_protocol_negotiation" (16) 0x56-0x58 (2)
0x005| 00 05 | .. | length: 5 0x58-0x5a (2)
0x005| 00 03 | .. | serer_names_length: 3 0x5a-0x5c (2)
0x005| 00 03 | .. | protocols_length: 3 0x5a-0x5c (2)
| | | protocols[0:1]: 0x5c-0x5f (3)
| | | [0]{}: protocol 0x5c-0x5f (3)
0x005| 02 | . | length: 2 0x5c-0x5d (1)
@ -5869,7 +5869,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | [0]{}: extension 0x54-0x70 (28)
0x005| 00 00 | .. | type: "server_name" (0) 0x54-0x56 (2)
0x005| 00 18 | .. | length: 24 0x56-0x58 (2)
0x005| 00 16 | .. | serer_names_length: 22 0x58-0x5a (2)
0x005| 00 16 | .. | server_names_length: 22 0x58-0x5a (2)
| | | server_names[0:1]: 0x5a-0x70 (22)
| | | [0]{}: server_name 0x5a-0x70 (22)
0x005| 00 | . | type: 0 0x5a-0x5b (1)
@ -5885,7 +5885,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | [3]{}: extension 0x78-0x92 (26)
0x007| 00 0d | .. | type: "signature_algorithms" (13) 0x78-0x7a (2)
0x007| 00 16 | .. | length: 22 0x7a-0x7c (2)
0x007| 00 14 | .. | signature_algorithm_length: 20 0x7c-0x7e (2)
0x007| 00 14 | .. | signature_algorithms_length: 20 0x7c-0x7e (2)
| | | signature_algorithms[0:10]: 0x7e-0x92 (20)
| | | [0]{}: signature_algorithm 0x7e-0x80 (2)
0x007| 06 | . | hash: "sha512" (6) 0x7e-0x7f (1)
@ -5931,7 +5931,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | [7]{}: extension 0xa3-0xc4 (33)
0x00a| 00 10 | .. | type: "application_layer_protocol_negotiation" (16) 0xa3-0xa5 (2)
0x00a| 00 1d | .. | length: 29 0xa5-0xa7 (2)
0x00a| 00 1b | .. | serer_names_length: 27 0xa7-0xa9 (2)
0x00a| 00 1b | .. | protocols_length: 27 0xa7-0xa9 (2)
| | | protocols[0:4]: 0xa9-0xc4 (27)
| | | [0]{}: protocol 0xa9-0xb2 (9)
0x00a| 08 | . | length: 8 0xa9-0xaa (1)
@ -5953,13 +5953,13 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | [9]{}: extension 0xc8-0xce (6)
0x00c| 00 0b | .. | type: "ec_point_formats" (11) 0xc8-0xca (2)
0x00c| 00 02 | .. | length: 2 0xca-0xcc (2)
0x00c| 01 | . | ex_points_format_length: 1 0xcc-0xcd (1)
0x00c| 01 | . | ex_points_formats_length: 1 0xcc-0xcd (1)
| | | ex_points_formats[0:1]: 0xcd-0xce (1)
0x00c| 00 | . | [0]: 0x0 ex_points_format 0xcd-0xce (1)
| | | [10]{}: extension 0xce-0xd8 (10)
0x00c| 00 0a| ..| type: "supported_groups" (10) 0xce-0xd0 (2)
0x00d|00 06 |.. | length: 6 0xd0-0xd2 (2)
0x00d| 00 04 | .. | supported_group_length: 4 0xd2-0xd4 (2)
0x00d| 00 04 | .. | supported_groups_length: 4 0xd2-0xd4 (2)
| | | supported_groups[0:2]: 0xd4-0xd8 (4)
0x00d| 00 17 | .. | [0]: 0x17 supported_group 0xd4-0xd6 (2)
0x00d| 00 18| | ..| | [1]: 0x18 supported_group 0xd6-0xd8 (2)

2
format/tls/testdata/ciphers/TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_EXPORT_WITH_DE
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_3DES_EDE_
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_AES_128_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_AES_128_C
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_AES_128_CBC_SHA256.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_AES_128_C
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_AES_128_GCM_SHA256.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_AES_128_G
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_AES_256_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_AES_256_C
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_AES_256_CBC_SHA256.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_AES_256_C
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_AES_256_GCM_SHA384.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_AES_256_G
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_CAMELLIA_
| | | [1]{}: extension 0x3b-0x61 (38)
0x003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_CAMELLIA_
| | | [1]{}: extension 0x3b-0x61 (38)
0x003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_DES_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_DES_CBC_S
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_DSS_WITH_SEED_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_DSS_WITH_SEED_CBC_
| | | [1]{}: extension 0x3b-0x61 (38)
0x003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_EXPORT_WITH_DE
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_3DES_EDE_
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_AES_128_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_AES_128_C
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_AES_128_CBC_SHA256.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_AES_128_C
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_AES_128_GCM_SHA256.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_AES_128_G
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_AES_256_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_AES_256_C
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_AES_256_CBC_SHA256.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_AES_256_C
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_AES_256_GCM_SHA384.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_AES_256_G
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_CAMELLIA_
| | | [1]{}: extension 0x3b-0x61 (38)
0x003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_CAMELLIA_
| | | [1]{}: extension 0x3b-0x61 (38)
0x003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_DES_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_DES_CBC_S
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_DHE_RSA_WITH_SEED_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_DHE_RSA_WITH_SEED_CBC_
| | | [1]{}: extension 0x3b-0x61 (38)
0x003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

8
format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_3DES_
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_3DES_
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_3DES_
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_3DES_
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_1
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_1
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_1
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_1
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_1
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_1
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_1
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_1
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_1
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_1
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_1
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_1
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_2
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_2
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_2
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_2
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_2
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_2
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_2
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_2
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_2
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_2
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_2
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_AES_2
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_ECDSA_WITH_RC4_128_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_RC4_1
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_RC4_1
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_RC4_1
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_ECDSA_WITH_RC4_1
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_3DES_ED
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_3DES_ED
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_3DES_ED
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_3DES_ED
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_128
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_AES_256
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDHE_RSA_WITH_RC4_128_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_RC4_128
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_RC4_128
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_RC4_128
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDHE_RSA_WITH_RC4_128
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_3DES_E
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_3DES_E
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_3DES_E
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_3DES_E
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_12
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_12
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_12
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_12
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_12
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_12
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_12
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_12
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_12
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_12
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_12
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_12
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_25
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_25
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_25
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_25
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_25
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_25
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_25
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_25
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_25
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_25
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_25
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_AES_25
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_ECDSA_WITH_RC4_128_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_RC4_12
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_RC4_12
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_RC4_12
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_ECDSA_WITH_RC4_12
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_3DES_EDE
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_3DES_EDE
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_3DES_EDE
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_3DES_EDE
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_RSA_WITH_AES_128_CBC_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_128_
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_128_
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_128_
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_128_
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_128_
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_128_
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_128_
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_128_
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_128_
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_128_
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_128_
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_128_
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_RSA_WITH_AES_256_CBC_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_256_
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_256_
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_256_
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_256_
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_256_
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_256_
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_256_
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -223,7 +223,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_256_
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_256_
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_256_
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_256_
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_AES_256_
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

8
format/tls/testdata/ciphers/TLS_ECDH_RSA_WITH_RC4_128_SHA.pcap.fqtest vendored
View File

@ -36,7 +36,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_RC4_128_
| | | [0]{}: extension 0x37-0x3f (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x37-0x39 (2)
0x000003| 00 04 | .. | length: 4 0x39-0x3b (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3b-0x3c (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3b-0x3c (1)
| | | ex_points_formats[0:3]: 0x3c-0x3f (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3c-0x3d (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3d-0x3e (1)
@ -45,7 +45,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_RC4_128_
0x000003| 00| .| type: "supported_groups" (10) 0x3f-0x41 (2)
0x000004|0a |. |
0x000004| 00 34 | .4 | length: 52 0x41-0x43 (2)
0x000004| 00 32 | .2 | supported_group_length: 50 0x43-0x45 (2)
0x000004| 00 32 | .2 | supported_groups_length: 50 0x43-0x45 (2)
| | | supported_groups[0:25]: 0x45-0x77 (50)
0x000004| 00 0e | .. | [0]: 0xe supported_group 0x45-0x47 (2)
0x000004| 00 0d | .. | [1]: 0xd supported_group 0x47-0x49 (2)
@ -81,7 +81,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_RC4_128_
| | | [3]{}: extension 0x7b-0xa1 (38)
0x000007| 00 0d | .. | type: "signature_algorithms" (13) 0x7b-0x7d (2)
0x000007| 00 22 | ." | length: 34 0x7d-0x7f (2)
0x000007| 00| .| signature_algorithm_length: 32 0x7f-0x81 (2)
0x000007| 00| .| signature_algorithms_length: 32 0x7f-0x81 (2)
0x000008|20 | |
| | | signature_algorithms[0:16]: 0x81-0xa1 (32)
| | | [0]{}: signature_algorithm 0x81-0x83 (2)
@ -222,7 +222,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_ECDH_RSA_WITH_RC4_128_
| | | [1]{}: extension 0x36-0x3e (8)
0x000003| 00 0b | .. | type: "ec_point_formats" (11) 0x36-0x38 (2)
0x000003| 00 04 | .. | length: 4 0x38-0x3a (2)
0x000003| 03 | . | ex_points_format_length: 3 0x3a-0x3b (1)
0x000003| 03 | . | ex_points_formats_length: 3 0x3a-0x3b (1)
| | | ex_points_formats[0:3]: 0x3b-0x3e (3)
0x000003| 00 | . | [0]: 0x0 ex_points_format 0x3b-0x3c (1)
0x000003| 01 | . | [1]: 0x1 ex_points_format 0x3c-0x3d (1)

2
format/tls/testdata/ciphers/TLS_RSA_EXPORT_WITH_DES40_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_RSA_EXPORT_WITH_DES40_
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_RSA_WITH_3DES_EDE_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_RSA_WITH_3DES_EDE_CBC_
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_RSA_WITH_AES_128_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_RSA_WITH_AES_128_CBC_S
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_RSA_WITH_AES_128_CBC_SHA256.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_RSA_WITH_AES_128_CBC_S
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_RSA_WITH_AES_128_GCM_SHA256.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_RSA_WITH_AES_128_GCM_S
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_RSA_WITH_AES_256_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_RSA_WITH_AES_256_CBC_S
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_RSA_WITH_AES_256_CBC_SHA256.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_RSA_WITH_AES_256_CBC_S
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_RSA_WITH_AES_256_GCM_SHA384.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_RSA_WITH_AES_256_GCM_S
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_RSA_WITH_CAMELLIA_128_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_RSA_WITH_CAMELLIA_128_
| | | [1]{}: extension 0x3b-0x61 (38)
0x003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_RSA_WITH_CAMELLIA_256_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_RSA_WITH_CAMELLIA_256_
| | | [1]{}: extension 0x3b-0x61 (38)
0x003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_RSA_WITH_DES_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_RSA_WITH_DES_CBC_SHA.p
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_RSA_WITH_IDEA_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_RSA_WITH_IDEA_CBC_SHA.
| | | [1]{}: extension 0x3b-0x61 (38)
0x003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_RSA_WITH_RC4_128_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_RSA_WITH_RC4_128_SHA.p
| | | [1]{}: extension 0x3b-0x61 (38)
0x000003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x000003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x000003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x000003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x000004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

2
format/tls/testdata/ciphers/TLS_RSA_WITH_SEED_CBC_SHA.pcap.fqtest vendored
View File

@ -39,7 +39,7 @@ $ fq -o keylog=@all.keylog ".tcp_connections[0] | dv" TLS_RSA_WITH_SEED_CBC_SHA.
| | | [1]{}: extension 0x3b-0x61 (38)
0x003| 00 0d | .. | type: "signature_algorithms" (13) 0x3b-0x3d (2)
0x003| 00 22 | ." | length: 34 0x3d-0x3f (2)
0x003| 00| .| signature_algorithm_length: 32 0x3f-0x41 (2)
0x003| 00| .| signature_algorithms_length: 32 0x3f-0x41 (2)
0x004|20 | |
| | | signature_algorithms[0:16]: 0x41-0x61 (32)
| | | [0]{}: signature_algorithm 0x41-0x43 (2)

14
format/tls/testdata/testtls.com.http1.1-tls1.2.pcap.fqtest vendored
View File

@ -61,7 +61,7 @@ $ fq -o keylog=@testtls.com.http1.1-tls1.2.pcap.keylog '.tcp_connections[0] | dv
| | | [0]{}: extension 0x6a-0x7e (20)
0x000006| 00 00 | .. | type: "server_name" (0) 0x6a-0x6c (2)
0x000006| 00 10 | .. | length: 16 0x6c-0x6e (2)
0x000006| 00 0e| ..| serer_names_length: 14 0x6e-0x70 (2)
0x000006| 00 0e| ..| server_names_length: 14 0x6e-0x70 (2)
| | | server_names[0:1]: 0x70-0x7e (14)
| | | [0]{}: server_name 0x70-0x7e (14)
0x000007|00 |. | type: 0 0x70-0x71 (1)
@ -70,7 +70,7 @@ $ fq -o keylog=@testtls.com.http1.1-tls1.2.pcap.keylog '.tcp_connections[0] | dv
| | | [1]{}: extension 0x7e-0x86 (8)
0x000007| 00 0b| ..| type: "ec_point_formats" (11) 0x7e-0x80 (2)
0x000008|00 04 |.. | length: 4 0x80-0x82 (2)
0x000008| 03 | . | ex_points_format_length: 3 0x82-0x83 (1)
0x000008| 03 | . | ex_points_formats_length: 3 0x82-0x83 (1)
| | | ex_points_formats[0:3]: 0x83-0x86 (3)
0x000008| 00 | . | [0]: 0x0 ex_points_format 0x83-0x84 (1)
0x000008| 01 | . | [1]: 0x1 ex_points_format 0x84-0x85 (1)
@ -78,7 +78,7 @@ $ fq -o keylog=@testtls.com.http1.1-tls1.2.pcap.keylog '.tcp_connections[0] | dv
| | | [2]{}: extension 0x86-0x96 (16)
0x000008| 00 0a | .. | type: "supported_groups" (10) 0x86-0x88 (2)
0x000008| 00 0c | .. | length: 12 0x88-0x8a (2)
0x000008| 00 0a | .. | supported_group_length: 10 0x8a-0x8c (2)
0x000008| 00 0a | .. | supported_groups_length: 10 0x8a-0x8c (2)
| | | supported_groups[0:5]: 0x8c-0x96 (10)
0x000008| 00 1d | .. | [0]: 0x1d supported_group 0x8c-0x8e (2)
0x000008| 00 17| ..| [1]: 0x17 supported_group 0x8e-0x90 (2)
@ -88,7 +88,7 @@ $ fq -o keylog=@testtls.com.http1.1-tls1.2.pcap.keylog '.tcp_connections[0] | dv
| | | [3]{}: extension 0x96-0xa5 (15)
0x000009| 00 10 | .. | type: "application_layer_protocol_negotiation" (16) 0x96-0x98 (2)
0x000009| 00 0b | .. | length: 11 0x98-0x9a (2)
0x000009| 00 09 | .. | serer_names_length: 9 0x9a-0x9c (2)
0x000009| 00 09 | .. | protocols_length: 9 0x9a-0x9c (2)
| | | protocols[0:1]: 0x9c-0xa5 (9)
| | | [0]{}: protocol 0x9c-0xa5 (9)
0x000009| 08 | . | length: 8 0x9c-0x9d (1)
@ -104,7 +104,7 @@ $ fq -o keylog=@testtls.com.http1.1-tls1.2.pcap.keylog '.tcp_connections[0] | dv
0x00000a| 00 0d | .. | type: "signature_algorithms" (13) 0xad-0xaf (2)
0x00000a| 00| .| length: 48 0xaf-0xb1 (2)
0x00000b|30 |0 |
0x00000b| 00 2e | .. | signature_algorithm_length: 46 0xb1-0xb3 (2)
0x00000b| 00 2e | .. | signature_algorithms_length: 46 0xb1-0xb3 (2)
| | | signature_algorithms[0:23]: 0xb3-0xe1 (46)
| | | [0]{}: signature_algorithm 0xb3-0xb5 (2)
0x00000b| 04 | . | hash: "sha256" (4) 0xb3-0xb4 (1)
@ -268,7 +268,7 @@ $ fq -o keylog=@testtls.com.http1.1-tls1.2.pcap.keylog '.tcp_connections[0] | dv
| | | [2]{}: extension 0x5a-0x62 (8)
0x000005| 00 0b | .. | type: "ec_point_formats" (11) 0x5a-0x5c (2)
0x000005| 00 04 | .. | length: 4 0x5c-0x5e (2)
0x000005| 03 | . | ex_points_format_length: 3 0x5e-0x5f (1)
0x000005| 03 | . | ex_points_formats_length: 3 0x5e-0x5f (1)
| | | ex_points_formats[0:3]: 0x5f-0x62 (3)
0x000005| 00| .| [0]: 0x0 ex_points_format 0x5f-0x60 (1)
0x000006|01 |. | [1]: 0x1 ex_points_format 0x60-0x61 (1)
@ -276,7 +276,7 @@ $ fq -o keylog=@testtls.com.http1.1-tls1.2.pcap.keylog '.tcp_connections[0] | dv
| | | [3]{}: extension 0x62-0x71 (15)
0x000006| 00 10 | .. | type: "application_layer_protocol_negotiation" (16) 0x62-0x64 (2)
0x000006| 00 0b | .. | length: 11 0x64-0x66 (2)
0x000006| 00 09 | .. | serer_names_length: 9 0x66-0x68 (2)
0x000006| 00 09 | .. | protocols_length: 9 0x66-0x68 (2)
| | | protocols[0:1]: 0x68-0x71 (9)
| | | [0]{}: protocol 0x68-0x71 (9)
0x000006| 08 | . | length: 8 0x68-0x69 (1)

10
format/tls/tls.go
View File

@ -243,7 +243,7 @@ func decodeTLSExtension(d *decode.D) {
d.FramedFn(int64(length)*8, func(d *decode.D) {
switch typ {
case extensionServerName:
serverNameLength := d.FieldU16("serer_names_length")
serverNameLength := d.FieldU16("server_names_length")
d.FieldArray("server_names", func(d *decode.D) {
d.FramedFn(int64(serverNameLength)*8, func(d *decode.D) {
for !d.End() {
@ -256,7 +256,7 @@ func decodeTLSExtension(d *decode.D) {
})
})
case extensionApplicationLayerProtocolNegotiation:
protocolsLength := d.FieldU16("serer_names_length")
protocolsLength := d.FieldU16("protocols_length")
d.FieldArray("protocols", func(d *decode.D) {
d.FramedFn(int64(protocolsLength)*8, func(d *decode.D) {
for !d.End() {
@ -268,7 +268,7 @@ func decodeTLSExtension(d *decode.D) {
})
})
case extensionEcPointFormats:
protocolsLength := d.FieldU8("ex_points_format_length")
protocolsLength := d.FieldU8("ex_points_formats_length")
d.FieldArray("ex_points_formats", func(d *decode.D) {
d.FramedFn(int64(protocolsLength)*8, func(d *decode.D) {
for !d.End() {
@ -277,7 +277,7 @@ func decodeTLSExtension(d *decode.D) {
})
})
case extensionSupportedGroups:
protocolsLength := d.FieldU16("supported_group_length")
protocolsLength := d.FieldU16("supported_groups_length")
d.FieldArray("supported_groups", func(d *decode.D) {
d.FramedFn(int64(protocolsLength)*8, func(d *decode.D) {
for !d.End() {
@ -286,7 +286,7 @@ func decodeTLSExtension(d *decode.D) {
})
})
case extensionSignatureAlgorithms:
protocolsLength := d.FieldU16("signature_algorithm_length")
protocolsLength := d.FieldU16("signature_algorithms_length")
d.FieldArray("signature_algorithms", func(d *decode.D) {
d.FramedFn(int64(protocolsLength)*8, func(d *decode.D) {
for !d.End() {