Bug #6578: ssh: no alert on packet with Message Code: New Keys (21) - Suricata - Open Information Security Foundation

Actions

Bug #6578

closed

PA PA

ssh: no alert on packet with Message Code: New Keys (21)

Bug #6578: ssh: no alert on packet with Message Code: New Keys (21)

Added by Philippe Antoine over 2 years ago. Updated about 2 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Philippe Antoine

Target version:

Affected Versions:

Effort:

Difficulty:

Label:

Description

Cf https://forum.suricata.io/t/can-not-get-ssh-alert/4223/8

Because of ssh parser setting APP_LAYER_PARSER_NO_INSPECTION right away and preventing detection on this packet

Subtasks 2 (0 open — 2 closed)

Actions

Also available in: PDF Atom