Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.Sign up
This can probably be achieved similarly to how logging works in https://github.com/0xxon/zeek-tls-log-alternative-parser.
We could also choose to completely suppress duplicate X509 events. I am a bit more hesitant about that, since it might break the assumption of user scripts. (There is a chance that it might save significant amount of processing in some networks though).