SSHOW - Design


Stateful, passive network monitor for SSH-1 and SSH-2

Maintain session packet history, including timing and directionality

Identify events based on simple signatures and packet history