ja4 icon indicating copy to clipboard operation
ja4 copied to clipboard

Zeek JA4H hashes an empty string instead of outputting 0000s

Open john-althouse opened this issue 8 months ago • 0 comments

Bug in JA4H on Zeek, when there's no cookie, it's supposed to output 0000's, like po10nn060000_cdb958d032b0_000000000000_000000000000 But instead it's hashing an empty string so it does: po10nn060000_cdb958d032b0_e3b0c44298fc_e3b0c44298fc

john-althouse avatar May 30 '24 21:05 john-althouse