[Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-25 Thread Vlad Grigorescu (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1344?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=20114#comment-20114 ] Vlad Grigorescu commented on BIT-1344: -- Fair enough. I'll get that added. New SSH

[Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-25 Thread Robin Sommer (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1344?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robin Sommer updated BIT-1344: -- I would prefer staying with the well-known ports. I see the argument for signature-only, but it would

Re: [Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-25 Thread Robin Sommer
On Tue, Mar 24, 2015 at 16:52 -0500, you wrote: This is something I've actually been moving away from. If I have a high level of confidence in the DPD signature, I'd rather rely on that, since I believe it will be more efficient than to try to attach the analyzer to all traffic on that

[Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-25 Thread Vlad Grigorescu (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1344?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=20115#comment-20115 ] Vlad Grigorescu commented on BIT-1344: -- I committed a change to register the analyzer on

[Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-25 Thread Vlad Grigorescu (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1344?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Vlad Grigorescu reassigned BIT-1344: Assignee: Johanna Amann (was: Vlad Grigorescu) New SSH Analyzer

[Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-25 Thread Johanna Amann (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1344?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Johanna Amann updated BIT-1344: --- Status: Merge Request (was: Open) New SSH Analyzer Key:

Re: [Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-25 Thread Seth Hall
On Mar 25, 2015, at 11:29 AM, Robin Sommer ro...@icir.org wrote: I would prefer staying with the well-known ports. I see the argument for signature-only, but it would be inconsistent with how the other analyzers works, making it hard to explain to people what's going on. And I don't expect

[Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-25 Thread Seth Hall (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1344?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Seth Hall updated BIT-1344: --- Ah, good point. I can see the argument to wait and do that all at once as yet another nail in the coffin of

[Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-25 Thread Johanna Amann (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1344?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Johanna Amann updated BIT-1344: --- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) New SSH Analyzer

[Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-24 Thread Johanna Amann (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1344?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=20110#comment-20110 ] Johanna Amann commented on BIT-1344: Thanks. And no, I will just go over it while

[Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-24 Thread Johanna Amann (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1344?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=20108#comment-20108 ] Johanna Amann commented on BIT-1344: Hi, just a few small questions I stumbled accross

[Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-24 Thread Johanna Amann (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1344?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Johanna Amann updated BIT-1344: --- Status: Open (was: Merge Request) New SSH Analyzer Key:

[Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-24 Thread Johanna Amann (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1344?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=20112#comment-20112 ] Johanna Amann commented on BIT-1344: I found a regression from master where the new SSH

[Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-18 Thread grigorescu (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1344?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] grigorescu updated BIT-1344: Status: Merge Request (was: Open) New SSH Analyzer Key: BIT-1344

[Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-18 Thread grigorescu (JIRA)
grigorescu created BIT-1344: --- Summary: New SSH Analyzer Key: BIT-1344 URL: https://bro-tracker.atlassian.net/browse/BIT-1344 Project: Bro Issue Tracker Issue Type: Improvement

[Bro-Dev] [JIRA] (BIT-1344) New SSH Analyzer

2015-03-18 Thread Johanna Amann (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1344?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Johanna Amann reassigned BIT-1344: -- Assignee: Johanna Amann New SSH Analyzer Key: BIT-1344