Re: SSH Analysis : ever tried ?



In article <slrnfhflvm.vg.elvis-85473@xxxxxxxxxxxxxx>, elvis-85473
@notatla.org.uk says...
On 2007-10-18, ChapiChapo <Chapi@xxxxxx> wrote:

This page demonstrates analysing a captured command line SSH session to
estimate original commands typed. This is not a flaw in SSH - SSH is a
great protocol regardless of these techniques; rather this is a
demonstration on what can possibly be deduced from the analysis of
encrypted traffic.

Did someone ever tried this ?
http://www.brendangregg.com/sshanalysis.html

Work like this has been done by 2 independent teams in 2001.
David Wagner & Dawn Song
Solar Designer & Dug Song

Thanks.
I though that the timing attacks on SSH were only usable on SSH v1.

.