Incidents: Difference between revisions

Line 179: Line 179:
|IP: TCP handshake<br>
|IP: TCP handshake<br>
(ip_tcp_handshake)
(ip_tcp_handshake)
|This trigger is checked after successful TCP handshake or at connection end it handshake failed.
|This trigger is checked after successful TCP handshake or at connection end if handshake failed.
|handshake_time, server_handshake_time, client_handshake_time
|handshake_time, server_handshake_time, client_handshake_time, handshake_failed
|mandatory
|mandatory
|-
|-
Line 264: Line 264:
(ssl_handshake)
(ssl_handshake)
|This trigger is checked during handshake of each SSL connection.
|This trigger is checked during handshake of each SSL connection.
|certificate_expires
|certificate_expires, tls_alert_level
|mandatory
|mandatory
|-
|-
340

edits