Detecting https-tunneled ssh traffic

[shyang (seungho yang)]

I have the same issue of ‘dsize’.

• ssh dsize issue

from suricata guide,

• Don’t Cross The Streams