From 48caa91d3fce3f1e69627d991e11acec5bc8500d Mon Sep 17 00:00:00 2001 From: Toni Uhlig Date: Sun, 8 Nov 2020 15:30:16 +0100 Subject: Improved SSH protocol detection. Signed-off-by: Toni Uhlig --- src/lib/protocols/ssh.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/lib/protocols/ssh.c') diff --git a/src/lib/protocols/ssh.c b/src/lib/protocols/ssh.c index 853ec1952..4b4813a74 100644 --- a/src/lib/protocols/ssh.c +++ b/src/lib/protocols/ssh.c @@ -407,7 +407,7 @@ static void ndpi_search_ssh_tcp(struct ndpi_detection_module_struct *ndpi_struct #endif if(flow->l4.tcp.ssh_stage == 0) { - if(packet->payload_packet_len > 7 && packet->payload_packet_len < 100 + if(packet->payload_packet_len > 7 && memcmp(packet->payload, "SSH-", 4) == 0) { int len = ndpi_min(sizeof(flow->protos.ssh.client_signature)-1, packet->payload_packet_len); -- cgit v1.2.3