`salo.events.zeek.ssl`

Module Contents

Classes

Mixin to provide __str__, __repr__, and __pretty__ methods. See #884 for more details.

Attributes

`TLS_VERSIONS`
`TLS_CIPHERS`
`TLS_CURVES`

salo.events.zeek.ssl.TLS_VERSIONS = ['TLSv10', 'TLSv12', 'TLSv13']

salo.events.zeek.ssl.TLS_CIPHERS = ['TLS_AES_128_GCM_SHA256', 'TLS_AES_256_GCM_SHA384', 'TLS_CHACHA20_POLY1305_SHA256',...

salo.events.zeek.ssl.TLS_CURVES = ['secp256r1', 'secp384r1', 'secp521r1', 'x25519']

class salo.events.zeek.ssl.SSLModel(__pydantic_self__, **data: Any)[source]

Bases: salo.events.zeek.base.ZeekModel

Mixin to provide __str__, __repr__, and __pretty__ methods. See #884 for more details.

__pretty__ is used by [devtools](https://python-devtools.helpmanual.io/) to provide human readable representations of objects.

_refs :List[str] = ['https://docs.zeek.org/en/master/scripts/base/protocols/ssl/main.zeek.html#type-SSL::Info',...

dest_port :int

version :Optional[str]

cipher :Optional[str]

curve :Optional[str]

server_name :str

resumed :Optional[bool]

last_alert :Optional[str]

next_protocol :Optional[str]

established :Optional[bool]

ssl_history :Optional[str]

cert_chain_fps :Optional[List[str]]

client_cert_chain_fps :Optional[List[str]]

subject :Optional[str]

issuer :Optional[str]

client_subject :Optional[str]

client_issuer :Optional[str]

sni_matches_cert :Optional[bool]

server_version :Optional[int]

client_version :Optional[int]

client_ciphers :Optional[List[int]]

ssl_client_exts :Optional[List[int]]

ssl_server_exts :Optional[List[int]]

ticket_lifetime_hint :Optional[int]

dh_param_size :Optional[int]

point_formats :Optional[List[int]]

client_curves :Optional[List[int]]

orig_alpn :Optional[List[str]]

client_supported_versions :Optional[List[int]]

server_supported_version :Optional[int]

client_key_share_groups :Optional[List[int]]

server_key_share_group :Optional[int]

client_comp_methods :Optional[List[int]]

sigalgs :Optional[List[int]]

hashalgs :Optional[List[int]]

validation_status :Optional[str]

ocsp_status :Optional[str]

valid_ct_logs :Optional[int]

valid_ct_operators :Optional[int]

ja3 :str

ja3s :str

set_dest_port(cls, v)[source]

set_version(cls, v)[source]

set_cipher(cls, v)[source]

set_curve(cls, v)[source]

set_resumed(cls, v)[source]

set_established(cls, v)[source]