iovisor / bcc

BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more
Apache License 2.0
20.36k stars 3.86k forks source link

tools/sslsniff: fix length field for handshake #5001

Closed i-Pear closed 4 months ago

i-Pear commented 4 months ago

The len field for SSL_do_handshake should be zero. The current implementation utilizes the return value, which is 1 on success [1].

Cc: @alban

[1] https://www.openssl.org/docs/manmaster/man3/SSL_do_handshake.html