Feature #4148: Research: SSH Support for additional protocol analysis - Suricata - Open Information Security Foundation

Actions

Feature #4148

open

Status:

New

Priority:

Normal

Assignee:

Target version:

Effort:

Difficulty:

Label:

Protocol

Description

Chris G:
Is there any additional work we can do in SSH protocol analysis? Corelight's article on SSH Inference was very interesting, though I'm not how well it works in reality. https://corelight.blog/2019/11/19/corelight-ssh-inference-package/

This could extend to other protocols

Related issues 2 (2 open — 0 closed)

Actions

Also available in: Atom PDF

	Related to Suricata - Task #4097: Suricon 2020 brainstorm	Assigned	Victor Julien				Actions
	Related to Suricata - Feature #7103: ssh: extra fields and keywords	Feedback	OISF Dev				Actions