Patrick Kelley 8fd444092b initial
2025-05-07 15:35:15 -04:00

13 lines
264 B
Standard ML

signature dpd_ssh_client {
ip-proto == tcp
payload /^[sS][sS][hH]-[12]\./
requires-reverse-signature dpd_ssh_server
enable "ssh"
tcp-state originator
}
signature dpd_ssh_server {
ip-proto == tcp
payload /^[sS][sS][hH]-[12]\./
tcp-state responder
}