suricata icon indicating copy to clipboard operation
suricata copied to clipboard

JA4 for TLS and QUIC -- v8

Open satta opened this issue 4 months ago • 4 comments

Previous PR: #10095

Link to redmine ticket: https://redmine.openinfosecfoundation.org/issues/6379

Changes to previous PR:

  • Rebase against current master.
  • Make JA3/JA4 switchable at compile time using --disable-ja3/--disable-ja4.
  • Add new features for requires keyword: ja3,ja4.
  • Add new feature strings: HAVE_JA3, HAVE_JA4
SV_BRANCH=pr/1634

satta avatar Feb 08 '24 21:02 satta