[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-10 Thread Justin Azoff (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24803#comment-24803 ] Justin Azoff commented on BIT-1545: --- The other thing to keep in mind is how this affects missed_bytes and

[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-10 Thread Johanna Amann (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24802#comment-24802 ] Johanna Amann commented on BIT-1545: Yes, that was pretty much the outcome of our discussion. The SSH case

[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-10 Thread Vern Paxson (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24800#comment-24800 ] Vern Paxson commented on BIT-1545: -- I'm definitely a fan of at least adding transparency that the value has

[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-07 Thread Johanna Amann (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Johanna Amann updated BIT-1545: --- Resolution: Merged (was: Fixed) Status: Closed (was: Merge Request) > SSH connection not

[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-07 Thread Johanna Amann (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Johanna Amann updated BIT-1545: --- Status: Merge Request (was: Open) > SSH connection not recording entire flow correctly >

[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-07 Thread Johanna Amann (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24705#comment-24705 ] Johanna Amann commented on BIT-1545: I talked to Robin - and was mistaken, most of these cases are actually

[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-07 Thread Aaron Eppert (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24704#comment-24704 ] Aaron Eppert commented on BIT-1545: --- There may be an instance where completely disabling processing still

[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-07 Thread Johanna Amann (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24703#comment-24703 ] Johanna Amann commented on BIT-1545: This actually is an interesting bug with a few larger implications. I

[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-05 Thread Aaron Eppert (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24612#comment-24612 ] Aaron Eppert commented on BIT-1545: --- https://github.com/bro/bro/pull/58 Is my proposal for dealing with this

[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-04 Thread Aaron Eppert (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24610#comment-24610 ] Aaron Eppert edited comment on BIT-1545 at 3/4/16 8:38 PM: ---

[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-04 Thread Justin Azoff (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24611#comment-24611 ] Justin Azoff commented on BIT-1545: --- Oh, right... I knew that option existed but I missed that the default

[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-04 Thread Aaron Eppert (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24610#comment-24610 ] Aaron Eppert commented on BIT-1545: --- {{SSH::skip_processing_after_detection}} defaults to T and is {{}}'able.

[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-04 Thread Johanna Amann (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Johanna Amann updated BIT-1545: --- Fix Version/s: 2.5 > SSH connection not recording entire flow correctly >

[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-04 Thread Jason Carr (JIRA)
Jason Carr created BIT-1545: --- Summary: SSH connection not recording entire flow correctly Key: BIT-1545 URL: https://bro-tracker.atlassian.net/browse/BIT-1545 Project: Bro Issue Tracker Issue

[Bro-Dev] [JIRA] (BIT-1545) SSH connection not recording entire flow correctly

2016-03-04 Thread Justin Azoff (JIRA)
[ https://bro-tracker.atlassian.net/browse/BIT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=24608#comment-24608 ] Justin Azoff commented on BIT-1545: --- I also realized it does the same thing on our standard ssh.pcap, so this