Method searchKexInit

decoder/stream/ssh/ssh_reader.go:227–494

(r *bufio.Reader, dir reassembly.TCPFlowDirection)

}

func (h *sshReader) searchKexInit(r *bufio.Reader, dir reassembly.TCPFlowDirection) {
	dirStr := "client"
	if dir != reassembly.TCPDirClientToServer {
		dirStr = "server"
	}

	sshLog.Debug("searchKexInit called",
		zap.String("ident", h.conversation.Ident),
		zap.String("direction", dirStr),
		zap.Bool("serverKexInitAlreadySet", h.serverKexInit != nil),
		zap.Bool("clientKexInitAlreadySet", h.clientKexInit != nil),
	)

	if h.serverKexInit != nil && h.clientKexInit != nil {
		sshLog.Debug("Both KexInit already set, skipping",
			zap.String("ident", h.conversation.Ident),
		)
		return
	}

	data, err := ioutil.ReadAll(r)
	if err != nil && !errors.Is(err, io.EOF) {
		sshLog.Warn("Failed to read data from buffer",
			zap.String("ident", h.conversation.Ident),
			zap.String("direction", dirStr),
			zap.Error(err),
		)
		fmt.Println(err)

		return
	}
	// fmt.Println(dir, len(data), "\n", hex.Dump(data))

	if len(data) == 0 {
		sshLog.Debug("No data to parse",
			zap.String("ident", h.conversation.Ident),
			zap.String("direction", dirStr),
		)
		return
	}

	sshLog.Debug("Read data from buffer",
		zap.String("ident", h.conversation.Ident),
		zap.String("direction", dirStr),
		zap.Int("dataLen", len(data)),
	)

	// length of the ident if it was found
	offset := 0

	if h.clientIdent == "" || h.serverIdent == "" { // read the SSH ident from the buffer
		sshLog.Debug("Parsing SSH ident",
			zap.String("ident", h.conversation.Ident),
			zap.String("direction", dirStr),
		)

		var (
			br       = bytes.NewReader(data)