Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-12 19:48:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

SSH base scripts: make sure ConnSizeAnalyzer variables are available before using them.

Browse source
This commit is contained in:
Gregor Maier 2011-08-11 12:20:38 -07:00
parent 7ea0646f30
commit 88f7db927e
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
scripts/base/protocols/ssh/main.bro
View file

@ -88,6 +88,11 @@ function check_ssh_connection(c: connection, done: bool)
if ( c$ssh$done ) if ( c$ssh$done )
return; return;
# Make sure conn_size_analyzer is active by checking
# resp$num_bytes_ip
if ( !c$resp?$num_bytes_ip )
return;
# If this is still a live connection and the byte count has not # If this is still a live connection and the byte count has not
# crossed the threshold, just return and let the resheduled check happen later. # crossed the threshold, just return and let the resheduled check happen later.
if ( !done && c$resp$num_bytes_ip < authentication_data_size ) if ( !done && c$resp$num_bytes_ip < authentication_data_size )