mirror of
https://github.com/zeek/zeek.git
synced 2025-10-07 17:18:20 +00:00
Fixing duplicate SSH authentication failure events.
We now do not raise more than one failure event per connection. Addresses BIT-1641.
This commit is contained in:
parent
420bef58aa
commit
176d9f23be
4 changed files with 31 additions and 7 deletions
|
@ -0,0 +1,7 @@
|
|||
# @TEST-EXEC: bro -C -r $TRACES/ssh/sshguess.pcap %INPUT | sort | uniq -c >output
|
||||
# @TEST-EXEC: btest-diff output
|
||||
|
||||
event ssh_auth_failed(c: connection)
|
||||
{
|
||||
print c$uid;
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue