zeek/scripts/base/protocols/ssh/dpd.sig
2015-01-06 20:27:20 -06:00

6 lines
88 B
Standard ML

signature dpd_ssh {
ip-proto == tcp
payload /^[sS][sS][hH]-[12]./
enable "ssh"
}