:tocdepth: 3

policy/protocols/ssl/ssl-log-ext.zeek
=====================================
.. zeek:namespace:: SSL

This file adds a lot of additional information to the SSL log
It is not loaded by default since the information significantly expands
the log and is probably not interesting for a majority of people.

:Namespace: SSL
:Imports: :doc:`base/protocols/ssl </scripts/base/protocols/ssl/index>`

Summary
~~~~~~~
Redefinitions
#############
=========================================== ===============================================================================================================
:zeek:type:`SSL::Info`: :zeek:type:`record`

                                            :New Fields: :zeek:type:`SSL::Info`

                                              server_version: :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                Numeric version of the server in the server hello

                                              client_version: :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                Numeric version of the client in the client hello

                                              client_ciphers: :zeek:type:`vector` of :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                Ciphers that were offered by the client for the connection

                                              ssl_client_exts: :zeek:type:`vector` of :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                SSL Client extensions

                                              ssl_server_exts: :zeek:type:`vector` of :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                SSL server extensions

                                              ticket_lifetime_hint: :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                Suggested ticket lifetime sent in the session ticket handshake
                                                by the server.

                                              dh_param_size: :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                The diffie helman parameter size, when using DH.

                                              point_formats: :zeek:type:`vector` of :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                supported elliptic curve point formats

                                              client_curves: :zeek:type:`vector` of :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                The curves supported by the client.

                                              orig_alpn: :zeek:type:`vector` of :zeek:type:`string` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                Application layer protocol negotiation extension sent by the client.

                                              client_supported_versions: :zeek:type:`vector` of :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                TLS 1.3 supported versions

                                              server_supported_version: :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                TLS 1.3 supported versions

                                              psk_key_exchange_modes: :zeek:type:`vector` of :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                TLS 1.3 Pre-shared key exchange modes

                                              client_key_share_groups: :zeek:type:`vector` of :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                Key share groups from client hello

                                              server_key_share_group: :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                Selected key share group from server hello

                                              client_comp_methods: :zeek:type:`vector` of :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                Client supported compression methods

                                              comp_method: :zeek:type:`count` :zeek:attr:`&optional`
                                                Server chosen compression method

                                              sigalgs: :zeek:type:`vector` of :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                Client supported signature algorithms

                                              hashalgs: :zeek:type:`vector` of :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                Client supported hash algorithms

                                              ech_kdf_id: :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                HPKE KDF identifier from the encrypted_client_hello extension.

                                              ech_aead_id: :zeek:type:`count` :zeek:attr:`&log` :zeek:attr:`&optional`
                                                HPKE AEAD identifier from the encrypted_client_hello extension.
=========================================== ===============================================================================================================


Detailed Interface
~~~~~~~~~~~~~~~~~~

