:orphan:

Package: base/protocols/ssh
===========================

Support for Secure Shell (SSH) protocol analysis.

:doc:`/scripts/base/protocols/ssh/__load__.bro`


:doc:`/scripts/base/protocols/ssh/main.bro`

   Base SSH analysis script.  The heuristic to blindly determine success or
   failure for SSH connections is implemented here.  At this time, it only
   uses the size of the data being returned from the server to make the
   heuristic determination about success of the connection.
   Requires that :bro:id:`use_conn_size_analyzer` is set to T!  The heuristic
   is not attempted if the connection size analyzer isn't enabled.

