BF: add expression for ssh filter for code 3: SSH2_DISCONNECT_KEY_EXCHAN...

...GE_FAILED. closes #289