Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-16 05:28:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add btest for new SSH curve25519 KEX

Browse source
This commit is contained in:
Vlad Grigorescu 2017-10-05 14:36:13 -05:00
parent 16f504e828
commit d7fbaad024
3 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
testing/btest/Baseline/scripts.base.protocols.ssh.curve25519_kex/ssh.log Normal file
View file

@ -0,0 +1,10 @@
#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path ssh
#open 2017-10-05-19-34-53
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p version auth_success auth_attempts direction client server cipher_alg mac_alg compression_alg kex_alg host_key_alg host_key
#types time string addr port addr port count bool count enum string string string string string string string string
1505524964.630115 CHhAvVGS1DHFjwGM9 192.168.1.100 60906 192.168.1.32 22 2 T 2 - SSH-2.0-OpenSSH_7.4 SSH-2.0-OpenSSH_7.5 chacha20-poly1305@openssh.com hmac-sha2-512-etm@openssh.com none curve25519-sha256 ssh-ed25519 e4:b1:8e:ca:6e:0e:e5:3c:7e:a4:0e:70:34:9d:b2:b1
#close 2017-10-05-19-34-53

BIN
testing/btest/Traces/ssh/ssh_kex_curve25519.pcap Normal file
View file

Binary file not shown.

6
testing/btest/scripts/base/protocols/ssh/curve25519_kex.test Normal file
View file

@ -0,0 +1,6 @@
# This tests a successful login with pubkey using curve25519 as the KEX algorithm
# @TEST-EXEC: bro -b -r $TRACES/ssh/ssh_kex_curve25519.pcap %INPUT
# @TEST-EXEC: btest-diff ssh.log
@load base/protocols/ssh