Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Updates related to SSH analysis.

Browse source 
- Some scripts used wrong SSH module/namespace scoping on events.
- Fix outdated notice documentation related to SSH password guessing.
- Add a unit test for SSH pasword guessing notice.
This commit is contained in:
Jon Siwek 2015-03-30 11:26:32 -05:00
parent 97962d25f2
commit dcbd0819a6
18 changed files with 112 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/base/protocols/ssh/main.bro
View file

@ -57,8 +57,8 @@ export {
global log_ssh: event(rec: Info);
## Event that can be handled when the analyzer sees an SSH server host
## key. This abstracts :bro:id:`SSH::ssh1_server_host_key` and
## :bro:id:`SSH::ssh2_server_host_key`.
## key. This abstracts :bro:id:`ssh1_server_host_key` and
## :bro:id:`ssh2_server_host_key`.
global ssh_server_host_key: event(c: connection, hash: string);
}