Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

GH-566: fix cases where ssh_encrypted_packet event wasn't raised

Browse source 
When encrypted data was bundled within the same segment as the NewKeys
message, it wasn't not reported via a ssh_encrypted_package event as
it should have been.
This commit is contained in:
Jon Siwek 2019-09-03 17:34:24 -07:00
parent d773b6986b
commit 30da2f83d0
8 changed files with 147 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

18
testing/btest/Baseline/scripts.base.protocols.ssh.ssh_segmented_encryption_transition/client.out Normal file
View file

@ -0,0 +1,18 @@
0, T, 64
1, F, 64
2, T, 80
3, F, 80
4, T, 272
5, F, 48
6, T, 80
7, F, 528
8, F, 64
9, T, 176
10, F, 160
11, F, 736
12, F, 96
13, T, 64
14, F, 64
15, F, 64
16, F, 48
17, F, 128

46
testing/btest/Baseline/scripts.base.protocols.ssh.ssh_segmented_encryption_transition/server.out Normal file
View file

@ -0,0 +1,46 @@
0, F, 172
1, T, 44
2, F, 44
3, T, 68
4, F, 52
5, T, 148
6, F, 28
7, T, 112
8, F, 500
9, F, 44
10, T, 460
11, F, 108
12, F, 100
13, F, 36
14, F, 36
15, F, 76
16, F, 36
17, F, 84
18, F, 36
19, F, 84
20, F, 36
21, F, 36
22, F, 36
23, F, 92
24, F, 36
25, F, 108
26, F, 36
27, F, 68
28, F, 36
29, F, 36
30, F, 68
31, F, 36
32, F, 68
33, F, 36
34, F, 36
35, F, 68
36, F, 36
37, F, 92
38, F, 36
39, F, 100
40, T, 36
41, F, 44
42, F, 36
43, F, 140
44, T, 36
45, T, 60