Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

[SSH] Handle SSH version 1.99

Browse source 
SSH can set in its identification a version 1.99 (SSH-1.99-xxx).
That means the client/server is compatible with SSHv1 and SSHv2.
So the version choice depends of the both side.

1.99 : 1.99 => 2.0
1.99 : 1.x  => 1.x
1.99 : 2.0  => 2.O

(see "Compatibility With Old SSH Versions" in RFC 4253)
This commit is contained in:
Brevet Vivien 2020-11-11 16:30:51 +01:00
parent 93469d811d
commit 3769ed6c66
6 changed files with 125 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

6
testing/btest/scripts/base/protocols/ssh/ssh_version_199.zeek Normal file
View file

@ -0,0 +1,6 @@
# This tests a successful auth between an SSHv1.99 and SSHv2.
# @TEST-EXEC: zeek -r $TRACES/ssh/ssh_version_199.pcap %INPUT
# @TEST-EXEC: btest-diff ssh.log
@load base/protocols/ssh