From 4ed961f5e65607bdcbf4696a15aa945fc8e471b3 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Thu, 1 Mar 2018 21:09:04 +0100
Subject: [PATCH] fix: disable correlation for compression algorithms

---
 objects/cowrie/definition.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/objects/cowrie/definition.json b/objects/cowrie/definition.json
index 2016b7b..d3926d1 100644
--- a/objects/cowrie/definition.json
+++ b/objects/cowrie/definition.json
@@ -114,7 +114,8 @@
       "description": "SSH compression algorithm supported in the session",
       "multiple": true,
       "ui-priority": 1,
-      "misp-attribute": "text"
+      "misp-attribute": "text",
+      "disable_correlation": true
     }
   },
   "version": 2,