What's New
SSH Deep Packet Inspection
- SSH protocol analysis with version detection (SSH-1.x, SSH-2.0)
- Client/server software identification (OpenSSH, PuTTY, libssh, etc.)
- Connection state tracking: Banner, KeyExchange, Authentication, Established
- Algorithm detection and SSH-specific filtering with
ssh:prefix
Improvements
- Enhanced GitHub Actions with path-based triggers
- Updated documentation with SSH examples
Examples
ssh:openssh # Filter OpenSSH connections
dport:22 state:established # Established SSH connections
state:keyexchange # SSH connections in key exchange
Full changelog: https://github.com/domcyrus/rustnet/blob/main/CHANGELOG.md