inliniac/suricata — pull request #958 by inliniac (2014-04-24 15:59:25+00:00)
Title: Encrypted heartbleed v1.7

Detect encrypted heartbleed. Support disabling raw reassembly on the fly. This is necessary as we now continue to process SSL/TLS after the handshake, but don't care about payload inspection. Just the SSL state.

Replaces: https://github.com/inliniac/suricata/pull/947

CC: @chifflier, @wmetcalf

Bug 1173: https://redmine.openinfosecfoundation.org/issues/1173

Prscript:
- PR build: https://buildbot.suricata-ids.org/builders/inliniac/builds/289
- PR pcaps: https://buildbot.suricata-ids.org/builders/inliniac-pcap/builds/207