mirror of
https://github.com/zeek/zeek.git
synced 2025-10-13 20:18:20 +00:00
fa98aee0a7
Conflicts: src/analyzer/protocol/CMakeLists.txt src/analyzer/protocol/ssh/Plugin.cc src/analyzer/protocol/ssh/SSH.h
59 lines
1.2 KiB
C++
59 lines
1.2 KiB
C++
#ifndef ANALYZER_PROTOCOL_SSH_SSH_H
|
|
#define ANALYZER_PROTOCOL_SSH_SSH_H
|
|
|
|
#include "events.bif.h"
|
|
|
|
|
|
#include "analyzer/protocol/tcp/TCP.h"
|
|
|
|
#include "ssh_pac.h"
|
|
|
|
namespace analyzer { namespace SSH {
|
|
|
|
class SSH_Analyzer
|
|
|
|
: public tcp::TCP_ApplicationAnalyzer {
|
|
|
|
public:
|
|
SSH_Analyzer(Connection* conn);
|
|
virtual ~SSH_Analyzer();
|
|
|
|
// Overriden from Analyzer.
|
|
virtual void Done();
|
|
|
|
virtual void DeliverStream(int len, const u_char* data, bool orig);
|
|
virtual void Undelivered(int seq, int len, bool orig);
|
|
|
|
static analyzer::Analyzer* Instantiate(Connection* conn)
|
|
{ return new SSH_Analyzer(conn); }
|
|
|
|
static bool Available()
|
|
{
|
|
return ( ssh_server_version || ssh_client_version ||
|
|
ssh_auth_successful || ssh_auth_failed ||
|
|
ssh_server_capabilities || ssh_server_host_key );
|
|
}
|
|
|
|
protected:
|
|
binpac::SSH::SSH_Conn* interp;
|
|
|
|
void ProcessEncrypted(int len, bool orig);
|
|
int AuthResult(int len, bool orig);
|
|
|
|
bool had_gap;
|
|
|
|
// Packet analysis stuff
|
|
int initial_client_packet_size;
|
|
int initial_server_packet_size;
|
|
int num_encrypted_packets_seen;
|
|
|
|
bool packet_n_1_is_orig;
|
|
int packet_n_1_size;
|
|
bool packet_n_2_is_orig;
|
|
int packet_n_2_size;
|
|
|
|
};
|
|
|
|
} } // namespace analyzer::*
|
|
|
|
#endif
|