Uploaded image for project: 'OpenNMS'
  1. OpenNMS
  2. NMS-5602

SSH Detector Incorrectly Adds Service

    XMLWordPrintable

    Details

      Description

      The SSH Detector incorrectly detects SSH on some devices.

      telnet 10.61.19.2 22
      Trying 10.61.19.2...
      Connected to 10.61.19.2.
      Escape character is '^]'.
      Connection closed by foreign host.

      Note that there is a connection to port 22 but that it is immediately dropped. However, the service is added to OpenNMS.

      The SSH detector should go beyond just a port check to test to see if there is, at a minimum, an SSH header. It should also exit cleanly as to avoid spurious SSH logs on the host device.

      Workaround:

      Modify the foreign source to use the TCP detector with a parameter of "banner" and a value of "SSH".

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            tarus Tarus Balog
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:

                Git Integration