Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 22:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
zeek/testing/btest/scripts/base
History
Exact
Arne Welzel 4f084b0b9a ssh: Fallback to client or server selected version for parsing 
In half-duplex setups (or when client/server coalesce the SSH version
line with the KEX packet, get_version() would return UNK as version,
causing a protocol violation. Make this slightly more robust by using
and setting the version which either side had set to continue parsing.

For the special case of SSH-1.99, select SSH-2.0. We could try to peak
into the payload following the packet length field and check for
a KEX_INIT type byte to select SSH2 as a heuristic, but not sure how
to accomplish this.

Slight regression fix for 3769ed6c66
which started to require visibility for client and server version
rather than just the client's version.
2024-06-12 16:30:18 +02:00
..
files Merge branch 'files_pe_timestamp_sync' of https://github.com/mvhensbergen/zeek 2024-05-29 14:16:31 +01:00
frameworks Restore label_names field in MetricOpts record 2024-06-04 14:14:58 -07:00
misc Parse and store localversion string 2024-04-17 14:17:22 -07:00
protocols ssh: Fallback to client or server selected version for parsing 2024-06-12 16:30:18 +02:00
utils Restore label_names field in MetricOpts record 2024-06-04 14:14:58 -07:00