Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-16 21:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

SSH: Ignore encrypted packets by default.

Browse source
This commit is contained in:
Vlad Grigorescu 2015-03-19 21:43:44 -04:00
parent f33e26242c
commit a119247dd3
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/base/protocols/ssh/main.bro
View file

@ -49,8 +49,8 @@ export {
## If true, we tell the event engine to not look at further data ## If true, we tell the event engine to not look at further data
## packets after the initial SSH handshake. Helps with performance ## packets after the initial SSH handshake. Helps with performance
## (especially with large file transfers) but precludes some ## (especially with large file transfers) but precludes some
## kinds of analyses. ## kinds of analyses. Defaults to T.
const skip_processing_after_detection = F &redef; const skip_processing_after_detection = T &redef;
## Event that can be handled to access the SSH record as it is sent on ## Event that can be handled to access the SSH record as it is sent on
## to the logging framework. ## to the logging framework.