From: Victor Julien <victor@inliniac.net>
Date: Thu, 16 Oct 2014 12:41:59 +0000 (+0200)
Subject: ssh.softwareversion: allow more characters
X-Git-Tag: suricata-2.1beta2~62
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=59d12f334e134ffa3f180800cd1a8d71971d770d;p=thirdparty%2Fsuricata.git

ssh.softwareversion: allow more characters

The keyword would not allow matching on "OpenSSH_5.5p1 Debian-6+squeeze5"
as the + and space characters were not allowed.

This patch adds support for them.
---

diff --git a/src/detect-ssh-software-version.c b/src/detect-ssh-software-version.c
index b31d51bead..f2df5a5383 100644
--- a/src/detect-ssh-software-version.c
+++ b/src/detect-ssh-software-version.c
@@ -61,7 +61,7 @@
 /**
  * \brief Regex for parsing the softwareversion string
  */
-#define PARSE_REGEX  "^\\s*\"?\\s*?([0-9a-zA-Z\\.\\-\\_]+)\\s*\"?\\s*$"
+#define PARSE_REGEX  "^\\s*\"?\\s*?([0-9a-zA-Z\\.\\-\\_\\+\\s+]+)\\s*\"?\\s*$"
 
 static pcre *parse_regex;
 static pcre_extra *parse_regex_study;