During BroCon, someone brought a bug in the SSH analyzer to my attention.
The SSH Capabilities record has the following field, which is being set
incorrectly:
## Are these the capabilities of the server?
> is_server: bool;
>
> result->Assign(6, new Val(${msg.is_orig}, TYPE_BOOL));
>
Obviously, I'd like to fix this. I'm curious to hear thoughts about getting
this into 2.6. I know that the hassh package currently works around the
broken logic.
--Vlad
_______________________________________________
bro-dev mailing list
[email protected]
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
