FoxIO-LLC/ja4 issues and pull requests

#56 - python ja4ssh is still different from wireshark

Issue - State: closed - Opened by noeltimothy 8 months ago

#55 - Make `ja4 --version` output more informative

Issue - State: open - Opened by vvv 8 months ago

#54 - fix for #40

Pull Request - State: closed - Opened by noeltimothy 8 months ago

#53 - rust ja4/ja4s issues with Arkime pcaps

Issue - State: closed - Opened by awick 9 months ago - 5 comments

#52 - rust ja4x issues with Arkime pcaps

Issue - State: closed - Opened by awick 9 months ago - 13 comments

#51 - rust crashes against Arkime pcaps

Issue - State: closed - Opened by awick 9 months ago - 8 comments

#50 - fixes issues #48 and #49

Pull Request - State: closed - Opened by noeltimothy 9 months ago

#49 - python ja4ssh implementation was not counting SSH payloads

Issue - State: closed - Opened by noeltimothy 9 months ago

#48 - JA4 is incorrect if Client Hello has cipher suite TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA

Issue - State: closed - Opened by ericrongo 9 months ago
Labels: bug

#47 - Appending JA4 to ssl.log

Issue - State: closed - Opened by hodf-cye 9 months ago - 2 comments
Labels: bug

#46 - Skip delegated credentials

Pull Request - State: closed - Opened by noeltimothy 9 months ago

#45 - Rust implementation fixes

Pull Request - State: closed - Opened by vvv 9 months ago

#44 - JA4H python implementation is not correctly handling Cookie and Referer headers

Issue - State: closed - Opened by J0eJ0h 9 months ago - 1 comment

#43 - Fix for issue #6

Pull Request - State: closed - Opened by noeltimothy 9 months ago - 2 comments

#42 - JA4H should be case-sensitive only for "Cookie" and "Referer" fields

Issue - State: closed - Opened by noeltimothy 9 months ago - 2 comments

#41 - JA4 is including signature hash algorithms outside of the signature hash extension

Issue - State: closed - Opened by john-althouse 9 months ago
Labels: bug

#40 - SNI and ALPN in JA4_ro extension list

Issue - State: closed - Opened by satta 9 months ago - 3 comments
Labels: documentation

#39 - Fix some typos

Pull Request - State: closed - Opened by vvv 9 months ago

#38 - JA4SSH: Look for bare ACK flags when counting ACK packets

Pull Request - State: closed - Opened by vvv 10 months ago

#37 - Fixes non-ascii ALPN values

Pull Request - State: closed - Opened by noeltimothy 10 months ago

#36 - JA4SSH Wireshark Plugin Counting SYNACK and PSHACK as ACKs

Issue - State: closed - Opened by john-althouse 10 months ago - 1 comment
Labels: bug

#35 - Fix ALPN value not showing up on JA4 #30

Pull Request - State: closed - Opened by noeltimothy 10 months ago

#34 - [fix] JA4: Handle single string values in alpn_list

Pull Request - State: closed - Opened by m1thryn 10 months ago - 2 comments

#33 - issue with helper.zeek script

Issue - State: closed - Opened by danielwazhere 10 months ago - 1 comment

#32 - [rust] Handle non-ASCII ALPN strings

Pull Request - State: closed - Opened by vvv 10 months ago - 1 comment

#31 - JA4 of Chrome (ECH)

Issue - State: open - Opened by fwilliamhe 10 months ago - 5 comments

#30 - ALPN part of JA4 not being set correctly in ja4.py

Issue - State: closed - Opened by m1thryn 10 months ago - 2 comments

#29 - Wireshark plugin for Mac does not work

Issue - State: closed - Opened by ketumbra 11 months ago - 8 comments
Labels: enhancement

#28 - patch lower tshark version oid

Pull Request - State: closed - Opened by ajinwu 11 months ago

#27 - About getting an oid error in your code that causes the isser hash to not be handled

Issue - State: closed - Opened by ajinwu 11 months ago - 1 comment
Labels: bug

#26 - Fix object-id error

Pull Request - State: closed - Opened by ajinwu 11 months ago

#25 - fix for issue #21, original order

Pull Request - State: closed - Opened by noeltimothy 11 months ago

#24 - [fix] JA4L: Handle "impure" TCP flags

Pull Request - State: closed - Opened by vvv 11 months ago

#23 - Use bitwise operators to determine TCP flag usage

Pull Request - State: closed - Opened by aminebenhariz 11 months ago

#22 - Extra flags in TCP handshake will break JA4L calculation

Issue - State: closed - Opened by aminebenhariz 11 months ago - 2 comments
Labels: bug

#21 - The Python script does not preserve the original ordering with -ro flags

Issue - State: closed - Opened by anthonykasza 11 months ago - 1 comment
Labels: bug

#20 - JA4H.md Cookie Values SHA256 Error

Issue - State: closed - Opened by idlefire 11 months ago - 2 comments

#19 - fixes issue #18

Pull Request - State: closed - Opened by noeltimothy 12 months ago

#18 - Python version of JA4H is not always keeping case

Issue - State: closed - Opened by john-althouse 12 months ago
Labels: bug

#17 - JA4H: Would detect whenever the header sent is in uppercase or not add value to the fingerprinting?

Issue - State: closed - Opened by unixfox 12 months ago - 2 comments

#16 - How are (erroneous) non-ASCII ALPN strings handled?

Issue - State: closed - Opened by johnthacker 12 months ago - 5 comments
Labels: enhancement

#15 - What is the exact license of the software? and the ja4 fingerprint calculation algorithm?

Issue - State: closed - Opened by adulau 12 months ago - 15 comments
Labels: documentation

#14 - Find certificates in "Server Hello" TLS packets

Pull Request - State: closed - Opened by vvv 12 months ago

#13 - fix(ja4): IPv6 has Hop Limit and not TTL

Pull Request - State: closed - Opened by uhei 12 months ago - 1 comment

#12 - fix for incorrect alpn in ja4s. Issue #11

Pull Request - State: closed - Opened by noeltimothy 12 months ago

#11 - JA4S and JA4X discrepancies between Rust and Python version

Issue - State: closed - Opened by john-althouse 12 months ago - 2 comments
Labels: bug

#10 - Enable `test_insta` on Windows

Issue - State: closed - Opened by vvv 12 months ago - 2 comments
Labels: enhancement, wontfix

#9 - rust/ja4: Add capture files and expected output

Pull Request - State: closed - Opened by vvv 12 months ago - 1 comment

#8 - Ja4 extension length should ignore grease

Pull Request - State: closed - Opened by noeltimothy 12 months ago

#7 - fixes for ipv6, http2 cookies and tshark minor version

Pull Request - State: closed - Opened by noeltimothy about 1 year ago

#6 - Delete `binaries` directory

Pull Request - State: closed - Opened by vvv about 1 year ago

#5 - rust: Add missing workspace files. Setup CI

Pull Request - State: closed - Opened by vvv about 1 year ago - 1 comment

#4 - Add Rust sources

Pull Request - State: closed - Opened by vvv about 1 year ago - 1 comment

#3 - Linux reference implementation QUIC issues?

Issue - State: closed - Opened by satta about 1 year ago - 3 comments

#2 - fix: tshark 4.2.x and 4.3.x are not older than 4.0.6

Pull Request - State: closed - Opened by uhei about 1 year ago - 1 comment

#1 - fix: tshark 4.2.x and 4.3.x are not older than 4.0.6

Pull Request - State: closed - Opened by uhei about 1 year ago

GitHub / FoxIO-LLC/ja4 issues and pull requests