]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
ssh.softwareversion: allow more characters
authorVictor Julien <victor@inliniac.net>
Thu, 16 Oct 2014 12:41:59 +0000 (14:41 +0200)
committerVictor Julien <victor@inliniac.net>
Wed, 22 Oct 2014 14:46:06 +0000 (16:46 +0200)
The keyword would not allow matching on "OpenSSH_5.5p1 Debian-6+squeeze5"
as the + and space characters were not allowed.

This patch adds support for them.

src/detect-ssh-software-version.c

index b31d51bead08c75f54988484fa481776ffe9b00a..f2df5a538350f0d001b6c3148159c9fa5264e385 100644 (file)
@@ -61,7 +61,7 @@
 /**
  * \brief Regex for parsing the softwareversion string
  */
-#define PARSE_REGEX  "^\\s*\"?\\s*?([0-9a-zA-Z\\.\\-\\_]+)\\s*\"?\\s*$"
+#define PARSE_REGEX  "^\\s*\"?\\s*?([0-9a-zA-Z\\.\\-\\_\\+\\s+]+)\\s*\"?\\s*$"
 
 static pcre *parse_regex;
 static pcre_extra *parse_regex_study;