From 75d7f3414f140b997677e8530900b3529ca8bce3 Mon Sep 17 00:00:00 2001 From: Vlad Grigorescu Date: Wed, 25 Mar 2015 12:37:04 -0400 Subject: [PATCH] SSH: Register analyzer for 22/tcp. --- scripts/base/protocols/ssh/main.bro | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/scripts/base/protocols/ssh/main.bro b/scripts/base/protocols/ssh/main.bro index 1dd49d7004..a052eeec1e 100644 --- a/scripts/base/protocols/ssh/main.bro +++ b/scripts/base/protocols/ssh/main.bro @@ -76,10 +76,12 @@ redef record connection += { ssh: Info &optional; }; -redef likely_server_ports += { 22/tcp }; +const ports = { 22/tcp }; +redef likely_server_ports += { ports }; event bro_init() &priority=5 { + Analyzer::register_for_ports(Analyzer::ANALYZER_SSH, ports); Log::create_stream(SSH::LOG, [$columns=Info, $ev=log_ssh]); }