void OnObservedAndDecryptedTlsHandshakeData(IP_Endpoint sourceEndpoint, IP_Endpoint destinationEndpoint, byte data[], dword vlanIds[], dword applicationChannel, EthernetPort hardwareChannel, enum RecordContentType contentType)
{
char endpointStr[100];
sourceEndpoint.PrintEndpointToString(endpointStr);
if (sourceEndpoint.Address.IsIPv4Address() == 1)
{
write("Observed IPv4 package from src endpoint = %s on network %s with %d bytes of TLS handshake data with content type %s", endpointStr, hardwareChannel.networkname, elCount(data), contentType.Name());
}
else if (sourceEndpoint.Address.IsIPv6Address() == 1)
{
write("Observed IPv6 package from src endpoint = %s on network %s with %d bytes of TLS handshake data with content type %s", endpointStr, hardwareChannel.networkname, elCount(data), contentType.Name());
}
if (contentType == eRecordContentAlert)
{
write("TLS alert occurred");
}
}