suricata
suricata copied to clipboard
JA4 for TLS and QUIC -- v8
Previous PR: #10095
Link to redmine ticket: https://redmine.openinfosecfoundation.org/issues/6379
Changes to previous PR:
- Rebase against current
master
. - Make JA3/JA4 switchable at compile time using
--disable-ja3
/--disable-ja4
. - Add new
feature
s forrequires
keyword:ja3
,ja4
. - Add new feature strings:
HAVE_JA3
,HAVE_JA4
SV_BRANCH=pr/1634