From: Anoop Saldanha <anoopsaldanha@gmail.com>
Date: Tue, 1 Oct 2013 15:43:07 +0000 (+0530)
Subject: Update ssl parser protocol detection pattern strings.
X-Git-Tag: suricata-2.0beta2~231
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=73be9d3ef7a6b26aaa3c228c59537c415ea7de61;p=thirdparty%2Fsuricata.git

Update ssl parser protocol detection pattern strings.
---

diff --git a/src/app-layer-ssl.c b/src/app-layer-ssl.c
index 63df5d582b..5ec0a02f0d 100644
--- a/src/app-layer-ssl.c
+++ b/src/app-layer-ssl.c
@@ -1040,6 +1040,13 @@ void RegisterSSLParsers(void)
         AlpProtoAdd(&alp_proto_ctx, proto_name, IPPROTO_TCP, ALPROTO_TLS, "|16 03 02|", 3, 0, STREAM_TOCLIENT); /* server hello */
         /** TLSv1.2 */
         AlpProtoAdd(&alp_proto_ctx, proto_name, IPPROTO_TCP, ALPROTO_TLS, "|16 03 03|", 3, 0, STREAM_TOCLIENT); /* server hello */
+        AlpProtoAdd(&alp_proto_ctx, proto_name, IPPROTO_TCP, ALPROTO_TLS, "|17 03 00|", 3, 0, STREAM_TOCLIENT); /* server hello */
+        /** TLSv1 */
+        AlpProtoAdd(&alp_proto_ctx, proto_name, IPPROTO_TCP, ALPROTO_TLS, "|17 03 01|", 3, 0, STREAM_TOCLIENT); /* server hello */
+        /** TLSv1.1 */
+        AlpProtoAdd(&alp_proto_ctx, proto_name, IPPROTO_TCP, ALPROTO_TLS, "|17 03 02|", 3, 0, STREAM_TOCLIENT); /* server hello */
+        /** TLSv1.2 */
+        AlpProtoAdd(&alp_proto_ctx, proto_name, IPPROTO_TCP, ALPROTO_TLS, "|17 03 03|", 3, 0, STREAM_TOCLIENT); /* server hello */
 
         if (RunmodeIsUnittests()) {
             AppLayerRegisterProbingParser(&alp_proto_ctx,