MCPcopy
hub / github.com/dreadl0ck/netcap / processSSHIdent

Method processSSHIdent

decoder/stream/ssh/ssh_reader.go:207–225  ·  view source on GitHub ↗
(ident string, entity string)

Source from the content-addressed store, hash-verified

205}
206
207func (h *sshReader) processSSHIdent(ident string, entity string) {
208 i := parseSSHIdent(ident)
209 if i != nil {
210 software.WriteSoftware([]*software.AtomicSoftware{
211 {
212 Software: &types.Software{
213 Timestamp: h.conversation.FirstClientPacket.UnixNano(),
214 Product: i.productName,
215 Version: i.productVersion,
216 SourceName: "SSH " + entity + " Ident",
217 Service: serviceSSH,
218 Flows: []string{h.conversation.Ident},
219 Notes: "SSH version: " + i.sshVersion + " OS: " + i.os,
220 SourceData: h.serverIdent,
221 },
222 },
223 }, nil)
224 }
225}
226
227func (h *sshReader) searchKexInit(r *bufio.Reader, dir reassembly.TCPFlowDirection) {
228 dirStr := "client"

Callers 1

searchKexInitMethod · 0.95

Calls 2

WriteSoftwareFunction · 0.92
parseSSHIdentFunction · 0.85

Tested by

no test coverage detected