]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect: add (mpm) keyword ja3s.string
authorMats Klepsland <mats.klepsland@gmail.com>
Fri, 16 Nov 2018 17:45:01 +0000 (18:45 +0100)
committerMats Klepsland <mats.klepsland@gmail.com>
Mon, 20 May 2019 12:30:27 +0000 (14:30 +0200)
commit0b489f329c39077ccb4b6b0a99cd5071671197af
tree60d1d747c02cba06ca87c351037297de38f41235
parent76b94c7073c2df08c61d5b2a1d9fb04ad802c2da
detect: add (mpm) keyword ja3s.string

Match on JA3S string using ja3s.string keyword, e.g:

  alert tls any any -> any any (msg:"ja3s.string test";
      ja3s.string; content:"10-11-12"; sid:1;)
src/Makefile.am
src/detect-engine-register.c
src/detect-engine-register.h
src/detect-tls-ja3s-string.c [new file with mode: 0644]
src/detect-tls-ja3s-string.h [new file with mode: 0644]