[JIRA] (BIT-1344) New SSH Analyzer

I would prefer staying with the well-known ports. I see the argument
for signature-only, but it would be inconsistent with how the other
analyzers works, making it hard to explain to people what's going on.
And I don't expect much of a problem in terms of efficienicy for SSH.

Ah, good point. I can see the argument to wait and do that all at once as yet another nail in the coffin of port-based-analysis.