Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

GH-1264: Implement "ssh_server_host_key" event

Browse source 
This event provides host key fingerprints for both SSH1 and SSH2.
This commit is contained in:
Jon Siwek 2020-11-13 21:48:29 -08:00
parent 93469d811d
commit bd40a97a78
8 changed files with 97 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

11
scripts/base/protocols/ssh/main.zeek
View file

@ -111,17 +111,6 @@ export {
## ssh_server_host_key ssh_encrypted_packet ssh2_dh_server_params
## ssh2_gss_error ssh2_ecc_key
global ssh_auth_result: event(c: connection, result: bool, auth_attempts: count);
## Event that can be handled when the analyzer sees an SSH server host
## key. This abstracts :zeek:id:`ssh1_server_host_key` and
## :zeek:id:`ssh2_server_host_key`.
##
## .. zeek:see:: ssh_server_version ssh_client_version
## ssh_auth_successful ssh_auth_failed ssh_auth_result
## ssh_auth_attempted ssh_capabilities ssh2_server_host_key
## ssh1_server_host_key ssh_encrypted_packet ssh2_dh_server_params
## ssh2_gss_error ssh2_ecc_key
global ssh_server_host_key: event(c: connection, hash: string);
}
module SSH;