Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Reformat function in SSH base script.

Browse source
This commit is contained in:
Benjamin Bannier 2021-06-16 14:57:30 +02:00
parent 0bf475f055
commit e6e30240ec
1 changed files with 45 additions and 45 deletions
Download patch file Download diff file Expand all files Collapse all files

90
scripts/base/protocols/ssh/main.zeek
View file

@ -156,51 +156,51 @@ function set_session(c: connection)
} }
function set_version(c: connection, version: string) function set_version(c: connection, version: string)
{ {
if ( c$ssh?$server && c$ssh?$client && |c$ssh$client| > 4 && |c$ssh$server| > 4 ) if ( c$ssh?$server && c$ssh?$client && |c$ssh$client| > 4 && |c$ssh$server| > 4 )
{ {
if ( c$ssh$client[4] == "1" && c$ssh$server[4] == "2" ) if ( c$ssh$client[4] == "1" && c$ssh$server[4] == "2" )
{ {
# SSH199 vs SSH2 -> 2 # SSH199 vs SSH2 -> 2
if ( ( |c$ssh$client| > 7 ) && ( c$ssh$client[6] == "9" ) && ( c$ssh$client[7] == "9" ) ) if ( ( |c$ssh$client| > 7 ) && ( c$ssh$client[6] == "9" ) && ( c$ssh$client[7] == "9" ) )
c$ssh$version = 2; c$ssh$version = 2;
# SSH1 vs SSH2 -> Undefined # SSH1 vs SSH2 -> Undefined
else else
c$ssh$version = 0; c$ssh$version = 0;
} }
else if ( c$ssh$client[4] == "2" && c$ssh$server[4] == "1" ) else if ( c$ssh$client[4] == "2" && c$ssh$server[4] == "1" )
{ {
# SSH2 vs SSH199 -> 2 # SSH2 vs SSH199 -> 2
if ( ( |c$ssh$server| > 7 ) && ( c$ssh$server[6] == "9" ) && ( c$ssh$server[7] == "9" ) ) if ( ( |c$ssh$server| > 7 ) && ( c$ssh$server[6] == "9" ) && ( c$ssh$server[7] == "9" ) )
c$ssh$version = 2; c$ssh$version = 2;
else else
# SSH2 vs SSH1 -> Undefined # SSH2 vs SSH1 -> Undefined
c$ssh$version = 0; c$ssh$version = 0;
} }
else if ( c$ssh$client[4] == "1" && c$ssh$server[4] == "1" ) else if ( c$ssh$client[4] == "1" && c$ssh$server[4] == "1" )
{ {
# SSH1 vs SSH199 -> 1 # SSH1 vs SSH199 -> 1
if ( ( |c$ssh$server| > 7 ) && ( c$ssh$server[6] == "9" ) && ( c$ssh$server[7] == "9" ) ) if ( ( |c$ssh$server| > 7 ) && ( c$ssh$server[6] == "9" ) && ( c$ssh$server[7] == "9" ) )
{ {
# SSH199 vs SSH199 # SSH199 vs SSH199
if (( |c$ssh$client| > 7 ) && ( c$ssh$client[6] == "9" ) && ( c$ssh$client[7] == "9" )) if (( |c$ssh$client| > 7 ) && ( c$ssh$client[6] == "9" ) && ( c$ssh$client[7] == "9" ))
c$ssh$version = 2; c$ssh$version = 2;
else else
c$ssh$version = 1; c$ssh$version = 1;
} }
else else
{ {
# SSH1 vs SSH1 -> 1 # SSH1 vs SSH1 -> 1
c$ssh$version = 1; c$ssh$version = 1;
} }
} }
# SSH2 vs SSH2 # SSH2 vs SSH2
else if (c$ssh$client[4] == "2" && c$ssh$server[4] == "2" ) else if (c$ssh$client[4] == "2" && c$ssh$server[4] == "2" )
{ {
c$ssh$version = 2; c$ssh$version = 2;
} }
} }
} }
event ssh_server_version(c: connection, version: string) event ssh_server_version(c: connection, version: string)
{ {