From 59d12f334e134ffa3f180800cd1a8d71971d770d Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Thu, 16 Oct 2014 14:41:59 +0200 Subject: [PATCH] ssh.softwareversion: allow more characters The keyword would not allow matching on "OpenSSH_5.5p1 Debian-6+squeeze5" as the + and space characters were not allowed. This patch adds support for them. --- src/detect-ssh-software-version.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/detect-ssh-software-version.c b/src/detect-ssh-software-version.c index b31d51bead..f2df5a5383 100644 --- a/src/detect-ssh-software-version.c +++ b/src/detect-ssh-software-version.c @@ -61,7 +61,7 @@ /** * \brief Regex for parsing the softwareversion string */ -#define PARSE_REGEX "^\\s*\"?\\s*?([0-9a-zA-Z\\.\\-\\_]+)\\s*\"?\\s*$" +#define PARSE_REGEX "^\\s*\"?\\s*?([0-9a-zA-Z\\.\\-\\_\\+\\s+]+)\\s*\"?\\s*$" static pcre *parse_regex; static pcre_extra *parse_regex_study;