Use SHA1 for SSH key fingerprinting -- likely needs zeekygen docs update

This commit is contained in:
Benjamin Bannier 2024-05-17 15:35:31 +02:00
parent 3d3793efc6
commit 35c2eb2de8
6 changed files with 39 additions and 38 deletions

View file

@ -7,5 +7,5 @@
#open XXXX-XX-XX-XX-XX-XX
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p version auth_success auth_attempts direction client server cipher_alg mac_alg compression_alg kex_alg host_key_alg host_key
#types time string addr port addr port count bool count enum string string string string string string string string
XXXXXXXXXX.XXXXXX CHhAvVGS1DHFjwGM9 10.0.0.1 59139 10.0.0.2 22 2 T 1 - SSH-1.99-Cisco-1.25 SSH-2.0-Cisco-1.25 aes128-cbc hmac-sha1 none diffie-hellman-group1-sha1 ssh-rsa 91:0a:ed:3f:79:71:22:f9:97:66:71:f8:c9:a5:b4:10
XXXXXXXXXX.XXXXXX CHhAvVGS1DHFjwGM9 10.0.0.1 59139 10.0.0.2 22 2 T 1 - SSH-1.99-Cisco-1.25 SSH-2.0-Cisco-1.25 aes128-cbc hmac-sha1 none diffie-hellman-group1-sha1 ssh-rsa f7:19:2a:c1:25:34:10:53:ac:0f:7c:3f:4b:3f:9b:18:5b:bc:d4:4a
#close XXXX-XX-XX-XX-XX-XX