Feature #2377: deprecate: ssh.softwareversion and ssh.protoversion - Suricata - Open Information Security Foundation

Custom queries

8.0.0 Stories
Good First Issues
OISF community
Open Doc tasks

Actions

Copy link

Feature #2377

closed

VJ PA

deprecate: ssh.softwareversion and ssh.protoversion

Feature #2377: deprecate: ssh.softwareversion and ssh.protoversion

Added by Victor Julien over 8 years ago. Updated almost 2 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Philippe Antoine

Target version:

8.0.0-beta1

Effort:

Difficulty:

Label:

Description

Superseded by ssh_proto and ssh_version stickybuffer implementations.

https://suricata-ids.org/about/deprecation-policy/

Related issues 1 (0 open — 1 closed)

Related to Suricata - Task #6326: Convert unittests to new FAIL/PASS API - detect-ssh-software-version.c

Rejected

Community Ticket

Actions

Issue # Delay: days Cancel Multiple values allowed (comma separated).

History
Notes
Property changes

TG Updated by Travis Green almost 7 years ago Actions
Copy link
#1

Victor Julien wrote:

Superseded by ssh_proto and ssh_version stickybuffer implementations.

https://suricata-ids.org/about/deprecation-policy/

Output is showing correct error message as of July 18 2019. Updated documentation to reflect change in buffer name from ssh_proto & ssh_version to ssh.proto & ssh.version.

Output:
[27834] 18/7/2019 -- 15:33:04 - (detect-parse.c:658) <Warning> (SigParseOptions) -- [ERRCODE: SC_WARN_DEPRECATED(203)] - keyword 'ssh.protoversion' is deprecated and will be removed soon. Use 'ssh.proto' instead. See https://suricata-ids.org/about/deprecation-policy/
[27834] 18/7/2019 -- 15:33:04 - (detect-parse.c:658) <Warning> (SigParseOptions) -- [ERRCODE: SC_WARN_DEPRECATED(203)] - keyword 'ssh.softwareversion' is deprecated and will be removed soon. Use 'ssh.software' instead. See https://suricata-ids.org/about/deprecation-policy/