Allow colon in SSH version, at least some trojaned PuTTY clients have version like...

diff --git a/src/detect-ssh-software-version.c b/src/detect-ssh-software-version.c
index f2df5a538350f0d001b6c3148159c9fa5264e385..4197bfffffdfac0beae42774ef78a77d7e392387 100644 (file)
--- a/src/detect-ssh-software-version.c
+++ b/src/detect-ssh-software-version.c
@@ -61,7 +61,7 @@
 /**
  * \brief Regex for parsing the softwareversion string
  */
-#define PARSE_REGEX  "^\\s*\"?\\s*?([0-9a-zA-Z\\.\\-\\_\\+\\s+]+)\\s*\"?\\s*$"
+#define PARSE_REGEX  "^\\s*\"?\\s*?([0-9a-zA-Z\\:\\.\\-\\_\\+\\s+]+)\\s*\"?\\s*$"
 
 static pcre *parse_regex;
 static pcre_extra *parse_regex_study;