From faaa5c5799440117f7a9cc78499433396dba7eb3 Mon Sep 17 00:00:00 2001 From: Luca Deri Date: Fri, 11 Oct 2024 19:23:29 +0200 Subject: Added support for printing JA4r when enabled --- src/lib/protocols/tls.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'src') diff --git a/src/lib/protocols/tls.c b/src/lib/protocols/tls.c index b42d200fc..3b9aff4e7 100644 --- a/src/lib/protocols/tls.c +++ b/src/lib/protocols/tls.c @@ -29,7 +29,7 @@ #include "ndpi_encryption.h" #include "ndpi_private.h" -#define JA4R_DECIMAL 1 +//#define JA4R_DECIMAL 1 static void ndpi_search_tls_wrapper(struct ndpi_detection_module_struct *ndpi_struct, struct ndpi_flow_struct *flow); @@ -2029,7 +2029,9 @@ static void ndpi_compute_ja4(struct ndpi_detection_module_struct *ndpi_struct, _ (sha256 hash of the list of cipher hex codes sorted in hex order, truncated to 12 characters) _ - (sha256 hash of (the list of extension hex codes sorted in hex order)_(the list of signature algorithms), truncated to 12 characters) + (sha256 hash of (the list of extension hex codes sorted in hex order) + _ + (the list of signature algorithms), truncated to 12 characters) */ ja_str[0] = is_dtls ? 'd' : ((quic_version != 0) ? 'q' : 't'); -- cgit v1.2.3