# Trouble with getting SSLv2 work for bro 0.9

**URL:** https://community.zeek.org/t/trouble-with-getting-sslv2-work-for-bro-0-9/1064
**Category:** Zeek
**Created:** [November 29, 2006, 4:31am UTC](https://community.zeek.org/t/trouble-with-getting-sslv2-work-for-bro-0-9/1064 "2006-11-29T04:31:05Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Bindiya\_V\_S](https://avatars.discourse-cdn.com/v4/letter/b/c89c15/32.png) [@Bindiya\_V\_S](https://community.zeek.org/u/Bindiya_V_S)
#### Post date: [November 29, 2006, 4:31am UTC](https://community.zeek.org/t/trouble-with-getting-sslv2-work-for-bro-0-9/1064/1 "2006-11-29T04:31:05Z")

</div>

Hi,

&nbsp;&nbsp;I am using bro 0.9 release on my network box. It is behaving weirdly with SSLv2 packets. Whenever an SSLv2 packet comes, its giving the error "SSLv2: FATAL: recordLength doesn't match data block length!"  
&nbsp;&nbsp;On further checking I figured out that data is getting overwritten in the function SSL\_ConnectionProxy::NewSSLRecord.  
So I replaced the initialization of sslpeo and sslper with  
&nbsp;&nbsp;&nbsp;&nbsp;sslpeo = (SSL\_ProxyEndpoint\*) orig-\>contents\_processor;  
&nbsp;&nbsp;&nbsp;&nbsp;sslper = (SSL\_ProxyEndpoint\*) resp-\>contents\_processor;  
as in SSLv1.1 release. So now the error is fixed, but its crashing when SSLv2 SERVER HELLO packet is coming. Its crashing when ((SSLv2\_Endpoint\*) s)-\>isDataPending() is getting called. Is there any fix for this?  
&nbsp;&nbsp;&nbsp;  
&nbsp;&nbsp;&nbsp;&nbsp;Can someone help me out?

I am waiting with my fingers crossed.

Thanks in advance,  
Bindiya

---

<div class="post-metadata">

### Author: ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)
#### Post date: [November 29, 2006, 6:37am UTC](https://community.zeek.org/t/trouble-with-getting-sslv2-work-for-bro-0-9/1064/2 "2006-11-29T06:37:52Z")

</div>

Can you please try Bro 1.2 and see if you get similar problems?

Robin

---

<div class="post-metadata">

### Author: ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:38pm UTC](https://community.zeek.org/t/trouble-with-getting-sslv2-work-for-bro-0-9/1064/3 "2022-05-06T15:38:03Z")

</div>


