1SSHOW(8)                    System Manager's Manual                   SSHOW(8)
2
3
4

NAME

6       sshow - SSH traffic analysis tool
7

SYNOPSIS

9       sshow [-d] [-i interface | -p pcapfile] [expression]
10

DESCRIPTION

12       sshow analyzes encrypted SSH-1 and SSH-2 traffic, identifying authenti‐
13       cation attempts, the lengths of passwords entered in  interactive  ses‐
14       sions, and command line lengths.
15
16       The  following  advisory  describes the attacks implemented by sshow in
17       detail:
18
19              http://www.openwall.com/advisories/OW-003-ssh-traffic-analy‐
20              sis.txt
21

OPTIONS

23       -d     Enable verbose debugging output.
24
25       -i interface
26              Specify the interface to listen on.
27
28       -p pcapfile
29              Process  packets from the specified PCAP capture file instead of
30              the network.
31
32       expression
33              Specify a tcpdump(8) filter  expression  to  select  traffic  to
34              sniff.
35

SEE ALSO

37       dsniff(8), sshmitm(8)
38

AUTHORS

40       Solar Designer <solar@openwall.com>
41       Dug Song <dugsong@monkey.org>
42
43
44
45                                                                      SSHOW(8)