tiny ssh patch

gistfile1.diff

diff --git a/scripts/base/protocols/ssh/main.bro b/scripts/base/protocols/ssh/main.bro
index cd20f4e..a8b784f 100644
--- a/scripts/base/protocols/ssh/main.bro
+++ b/scripts/base/protocols/ssh/main.bro
@@ -108,6 +108,8 @@ function check_ssh_connection(c: connection, done: bool)
        if ( c$ssh$done )
                return;
        
+       lookup_connection(c$id);
+
        # Make sure conn_size_analyzer is active by checking 
        # resp$num_bytes_ip.  In general it should always be active though.
        if ( ! c$resp?$num_bytes_ip )