app-layer-ssh.c File Reference

#include "suricata-common.h"
#include "suricata.h"
#include "decode.h"
#include "app-layer-detect-proto.h"
#include "app-layer-protos.h"
#include "app-layer-parser.h"
#include "app-layer-ssh.h"
#include "rust.h"
#include "conf.h"
#include "util-unittest.h"
#include "util-debug.h"
#include "util-memcmp.h"
#include "rust-bindings.h"
#include "flow-util.h"
#include "stream-tcp-util.h"
#include "util-unittest-helper.h"
#include "stream-tcp-private.h"
#include "stream-tcp-reassemble.h"
#include "stream-tcp.h"

Include dependency graph for app-layer-ssh.c:

Go to the source code of this file.

Macros
#define	SSH_CONFIG_DEFAULT_HASSH   false
#define	SSH_CONFIG_DEFAULT_ENCRYPTION_BYPASS   ENCRYPTION_HANDLING_TRACK_ONLY
#define	MAX_SSH_TEST_SIZE   512

Functions
bool	SSHTxLogCondition (ThreadVars *tv, const Packet *p, void *state, void *tx, uint64_t tx_id)
void	RegisterSSHParsers (void)
	Function to register the SSH protocol parsers and other functions. More...
void	SSHParserRegisterTests (void)

Detailed Description

Author

Pablo Rincon pablo.nosp@m..rin.nosp@m.con.c.nosp@m.resp.nosp@m.o@gma.nosp@m.il.c.nosp@m.om

Victor Julien victo.nosp@m.r@in.nosp@m.linia.nosp@m.c.ne.nosp@m.t

App-layer parser for SSH protocol

Definition in file app-layer-ssh.c.

Macro Definition Documentation

MAX_SSH_TEST_SIZE

#define MAX_SSH_TEST_SIZE   512

Definition at line 490 of file app-layer-ssh.c.

SSH_CONFIG_DEFAULT_ENCRYPTION_BYPASS

#define SSH_CONFIG_DEFAULT_ENCRYPTION_BYPASS   ENCRYPTION_HANDLING_TRACK_ONLY

Definition at line 51 of file app-layer-ssh.c.

SSH_CONFIG_DEFAULT_HASSH

#define SSH_CONFIG_DEFAULT_HASSH   false

Definition at line 49 of file app-layer-ssh.c.

Function Documentation

RegisterSSHParsers()

void RegisterSSHParsers

(

void

)

Function to register the SSH protocol parsers and other functions.

Definition at line 87 of file app-layer-ssh.c.

References ALPROTO_SSH, AppLayerProtoDetectRegisterProtocol(), and SCAppLayerProtoDetectConfProtoDetectionEnabled().

Here is the call graph for this function:

SSHParserRegisterTests()

void SSHParserRegisterTests

(

void

)

Definition at line 2333 of file app-layer-ssh.c.

References UtRegisterTest().

Here is the call graph for this function:

SSHTxLogCondition()

bool SSHTxLogCondition	(	ThreadVars *	tv,
		const Packet *	p,
		void *	state,
		void *	tx,
		uint64_t	tx_id
	)

Definition at line 65 of file app-layer-ssh.c.

References EngineModeIsIPS(), Flow_::flags, Packet_::flow, FLOW_ACTION_DROP, and p.

Here is the call graph for this function: