Support for Secure Shell (SSH) protocol analysis.
base/protocols/ssh/__load__.bro
Base SSH analysis script. The heuristic to blindly determine success or failure for SSH connections is implemented here. At this time, it only uses the size of the data being returned from the server to make the heuristic determination about success of the connection. Requires that use_conn_size_analyzer is set to T! The heuristic is not attempted if the connection size analyzer isn’t enabled.