Fixing duplicate SSH authentication failure events.

We now do not raise more than one failure event per connection.

Addresses BIT-1641.
This commit is contained in:
Robin Sommer 2016-08-01 08:42:36 -07:00
parent 420bef58aa
commit 176d9f23be
4 changed files with 31 additions and 7 deletions

View file

@ -35,12 +35,14 @@ namespace analyzer {
bool had_gap;
// Packet analysis stuff
bool auth_decision_made;
bool skipped_banner;
int service_accept_size;
int userauth_failure_size;
enum AuthDecision {
AUTH_UNKNOWN, AUTH_FAILURE, AUTH_SUCCESS
} auth_decision;
};
}