Re: Decryption of HTTP traffic
Vlad Grigorescu <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAPqbkwvyCkNYeYGbYLJQ2_BVxdw=t7mKMPh5ZedWpGZaOr5tCg@mail.gmail.com> |
No. On Wed, Aug 28, 2019 at 9:25 PM Jonah Burgess <[email protected]> wrote: > Hi, > > > > When feeding PCAPs to Zeek, is there any functionality to decrypt HTTPS > traffic? > > > > I see that the SSL log contains “a record of SSL sessions, including > certificates being used” - can these certificates be used to decrypt PCAPs > before Zeek processes them to ensure HTTP logs are correctly populated? > > > > Thanks, > > Jonah > _______________________________________________ > Zeek mailing list > [email protected] > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek