anti d3321324eb feat(sniffer): capture SSH client banner from TCP stream ...

Parse RFC 4253 §4.2 identification strings from the first attacker→decky
data segment on TCP/22; emit ssh_client_banner syslog events and bus
fan-out. Profiler's sniffer_rollup dedupes observed banners into a new
AttackerBehavior.ssh_client_banners JSON column.

Closes gap #3 from SIGNAL_CAPTURE_AUDIT.md.

2026-04-22 21:37:01 -04:00

..

__init__.py

feat: fleet-wide MACVLAN sniffer microservice

2026-04-14 15:02:34 -04:00

fingerprint.py

feat(sniffer): capture SSH client banner from TCP stream

2026-04-22 21:37:01 -04:00

p0f.py

feat: complete OTEL tracing across all services with pipeline bridge and docs

2026-04-16 00:58:08 -04:00

syslog.py

refactor: strip DECNET tokens from container-visible surface

2026-04-17 22:57:53 -04:00

worker.py

feat(workers): bus-backed Workers panel (registry, control, installed flag)

2026-04-22 14:10:39 -04:00