Custom probe settings

From MikroTik Wiki
Revision as of 23:29, 4 January 2008 by Bluecrow76 (talk | contribs) (SSH)
Jump to: navigation, search

SSH

The default SSH probe gives the following log entries in /var/log/secure:

Did not receive identification string from ::ffff:XXX.XXX.XXX.XXX

To clean this up, I changed the ssh probe to the following:

Thedude-probe-ssh.png

Name: ssh
Type: TCP
Port: 22
Conncet Only: unchecked
First Receive, Then Send: Checked

Send: <greyed out>
Receive: ^SSH\\.*
Send: SSH-2.0-TheDude-Ping\r\n
Receive: 
Send: 
Receive: 

Now the entry I get in the log file is:

Connection closed by ::ffff:XXX.XXX.XXX.XXX

The connection is now "properly" closed by The Dude.