Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-09 18:18:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Checkpoint for SumStats rename.

Browse source
This commit is contained in:
Seth Hall 2013-04-15 15:12:28 -04:00
parent 8165d6077d
commit fbe967e16a
32 changed files with 626 additions and 620 deletions
Download patch file Download diff file Expand all files Collapse all files

3
scripts/base/protocols/ssh/main.bro
View file

@ -5,6 +5,7 @@
##! Requires that :bro:id:`use_conn_size_analyzer` is set to T! The heuristic
##! is not attempted if the connection size analyzer isn't enabled.
@load base/protocols/conn
@load base/frameworks/notice
@load base/utils/site
@load base/utils/thresholds
@ -115,7 +116,7 @@ function check_ssh_connection(c: connection, done: bool)
# Responder must have sent fewer than 40 packets.
c$resp$num_pkts < 40 &&
# If there was a content gap we can't reliably do this heuristic.
c$conn$missed_bytes == 0)# &&
c?$conn && c$conn$missed_bytes == 0)# &&
# Only "normal" connections can count.
#c$conn?$conn_state && c$conn$conn_state in valid_states )
{