wader/fq
1
1
Fork 0
mirror of https://github.com/wader/fq.git synced 2024-12-19 03:11:41 +03:00
Code Issues Projects Releases Wiki Activity
03316988aa
fq/format/tls/testdata
History
Mattias Wadman 051a70bd4b interp: Change bit ranges to use exclusive end 
All other ranges and slicing uses exclusive end so i think it make sense
to make it consistent.

Update docs and add additional example for non-byte-aligned field.

Also fixes issue showing zero bit ranges as start-NA.
2023-10-20 15:37:26 +02:00
..
ciphers interp: Change bit ranges to use exclusive end 2023-10-20 15:37:26 +02:00
dump-broken.pcapng tls: Add TLS 1.0, 1.1, 1.2 decode and decryption 2023-03-05 13:52:12 +01:00
dump-broken.pcapng.fqtest interp: Change bit ranges to use exclusive end 2023-10-20 15:37:26 +02:00
dump-broken.pcapng.keylog tls: Add TLS 1.0, 1.1, 1.2 decode and decryption 2023-03-05 13:52:12 +01:00
dump.pcapng tls: Add TLS 1.0, 1.1, 1.2 decode and decryption 2023-03-05 13:52:12 +01:00
dump.pcapng.keylog tls: Add TLS 1.0, 1.1, 1.2 decode and decryption 2023-03-05 13:52:12 +01:00
help_tls.fqtest help,markdown: Rewrote and made text rendering nicer 2023-05-08 00:07:56 +02:00
ja3.fqtest tls: Add TLS 1.0, 1.1, 1.2 decode and decryption 2023-03-05 13:52:12 +01:00
ja3.jq tls: Add TLS 1.0, 1.1, 1.2 decode and decryption 2023-03-05 13:52:12 +01:00
README.md tls: Add TLS 1.0, 1.1, 1.2 decode and decryption 2023-03-05 13:52:12 +01:00
split.jq tls: Add TLS 1.0, 1.1, 1.2 decode and decryption 2023-03-05 13:52:12 +01:00
testtls.com.http1.1-tls1.2.pcap tls: Add TLS 1.0, 1.1, 1.2 decode and decryption 2023-03-05 13:52:12 +01:00
testtls.com.http1.1-tls1.2.pcap.fqtest interp: Change bit ranges to use exclusive end 2023-10-20 15:37:26 +02:00
testtls.com.http1.1-tls1.2.pcap.keylog tls: Add TLS 1.0, 1.1, 1.2 decode and decryption 2023-03-05 13:52:12 +01:00
to_tar.jq tls: Add TLS 1.0, 1.1, 1.2 decode and decryption 2023-03-05 13:52:12 +01:00

README.md

dump.pcapng dump-broken.pcapng was created by Peter Wu and comes from https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9144.

dump.pcapng contains 73 tls connections with differens cipher suites. split.jq was used to split it into one pcap per connection named after cipher suit used.

dump-broken.pcapng is a broken SSL v3, uses extensions. dump-broken.pcapng.keylog not used yet.