Here is a trivial patch providing the current bro release for a Rsh analyser.
It used to allow the detection of funny behaviors like local/remote username mismatch, interactive shell in rsh, etc.
Of few interests now but as it still was in the wish list...
Manu
bro-pub-0.9a4a-rsh.diff (13.8 KB)