Hello guys, is it possible to remove the feature ‘HASSH’ when compiling Suricata?
The version is 6.0.9, thank you!
No; hassh is not a feature that can be configured on/off for compilation.
You can disable hassh at runtime however – note that it’s disabled by default
app-layer:
protocols:
ssh:
hassh: no
1 Like