Feature #2377
closed
Victor Julien wrote:
Superseded by ssh_proto and ssh_version stickybuffer implementations.
https://suricata-ids.org/about/deprecation-policy/
Output is showing correct error message as of July 18 2019. Updated documentation to reflect change in buffer name from ssh_proto & ssh_version to ssh.proto & ssh.version.
Output:
[27834] 18/7/2019 -- 15:33:04 - (detect-parse.c:658) <Warning> (SigParseOptions) -- [ERRCODE: SC_WARN_DEPRECATED(203)] - keyword 'ssh.protoversion' is deprecated and will be removed soon. Use 'ssh.proto' instead. See https://suricata-ids.org/about/deprecation-policy/
[27834] 18/7/2019 -- 15:33:04 - (detect-parse.c:658) <Warning> (SigParseOptions) -- [ERRCODE: SC_WARN_DEPRECATED(203)] - keyword 'ssh.softwareversion' is deprecated and will be removed soon. Use 'ssh.software' instead. See https://suricata-ids.org/about/deprecation-policy/
- Assignee changed from Victor Julien to OISF Dev
- Target version changed from TBD to 6.0.0beta1
- Target version changed from 6.0.0beta1 to 7.0.0-beta1
- Target version changed from 7.0.0-beta1 to 8.0.0-beta1
- Assignee changed from OISF Dev to Jason Ish
- Status changed from Assigned to In Review
- Assignee changed from Jason Ish to Philippe Antoine
- Related to Task #6326: Convert unittests to new FAIL/PASS API - detect-ssh-software-version.c added
- Status changed from In Review to Closed
Also available in: Atom
PDF