ssh_log : file
Alerts related to ssh connections go in this file.
did_ssh_version : table[addr, bool] of count
Indexed by host IP and (T for client, F for server), the table tracks if we have recorded the SSH version. Values of one and greater are essentially equivalent.