[Bro] Enable ssh detection?

rahul rakesh rahulbroids at gmail.com
Wed Sep 19 01:56:12 PDT 2018


Hi all,

Given SSH example from Bro site  is working fine ,when it is tested from
the command line .
I mean SSH events such as  failed and success are generated and also log is
created.
But with out using ssh guess pcap file, when i do ssh thing between two
systems, these
events such as ssh_auth_fail and success are *NOT *generating. Can you tell
How to solve this issue?. or How can i enable SSH detection?

with regards
ravi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20180919/10e2599c/attachment.html 


More information about the Bro mailing list