Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-12 03:28:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Updates related to SSH analysis.

Browse source 
- Some scripts used wrong SSH module/namespace scoping on events.
- Fix outdated notice documentation related to SSH password guessing.
- Add a unit test for SSH pasword guessing notice.
This commit is contained in:
Jon Siwek 2015-03-30 11:26:32 -05:00
parent 97962d25f2
commit dcbd0819a6
18 changed files with 112 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/policy/protocols/ssh/detect-bruteforcing.bro
View file

@ -69,7 +69,7 @@ event bro_init()
}]);
}
event SSH::ssh_auth_successful(c: connection, auth_method_none: bool)
event ssh_auth_successful(c: connection, auth_method_none: bool)
{
local id = c$id;
@ -78,7 +78,7 @@ event SSH::ssh_auth_successful(c: connection, auth_method_none: bool)
$where=SSH::SUCCESSFUL_LOGIN]);
}
event SSH::ssh_auth_failed(c: connection)
event ssh_auth_failed(c: connection)
{
local id = c$id;