Logic fix for ssh/main.bro when the auth status is indeterminate, and fix a test. Addresses BIT-1641.

This commit is contained in:
Vlad Grigorescu 2016-10-13 16:33:48 -05:00
parent 7caf2d0356
commit 70aaffbaac
2 changed files with 24 additions and 10 deletions

View file

@ -1,7 +1,7 @@
# @TEST-EXEC: bro -C -r $TRACES/ssh/sshguess.pcap %INPUT | sort >output
# @TEST-EXEC: btest-diff output
event ssh_auth_failed(c: connection)
event SSH::ssh_auth_failed(c: connection)
{
print c$uid;
}