SSHOW(8)

💖 SSHOW 💖

ok bestie, welcome to sshow(8) — yes she's a section 8 system manager's manual page, we love a system administration era 👑

✨ NAME ✨

sshow — the SSH traffic analysis tool 🕵️♀️✨

🌸 SYNOPSIS 🌸

sshow [-d] [-i interface | -p pcapfile] [expression]

🦋 DESCRIPTION 🦋

okay so. sshow analyzes encrypted SSH-1 and SSH-2 traffic 💅 and it's out here identifying:

• authentication attempts
• the lengths of passwords entered in interactive sessions 🔥
• command line lengths

literally the way that it can see all that through the encryption?? it's giving main character energy, no cap.

the following advisory describes the attacks implemented by sshow in detail — go read it bestie, it's iconic:

http://www.openwall.com/advisories/OW-003-ssh-traffic-analysis.txt

🎀 OPTIONS 🎀

• -d — turn on verbose debugging output. she's chatty, she's telling you everything 🗣️✨
• -i interface — specify the interface to listen on 👂
• -p pcapfile — process packets from the specified PCAP capture file instead of the network. like, rewind the tape instead of catching it live 📼
• expression — specify a tcpdump(8) filter expression to select the traffic to sniff 🌈

🌟 SEE ALSO 🌟

dsniff(8), sshmitm(8) 🫶

👑 AUTHORS 👑

• Solar Designer <solar@openwall.com>
• Dug Song <dugsong@monkey.org>

💀 reminder bestie: this is a traffic analysis tool, so use it on stuff you're actually allowed to sniff. respect the vibe check 🙈

ok that's the whole page fr fr 💖 this was sshow from the System Manager's Manual, section 8 — go be nosy responsibly, mwah 🎀✨💅