From d038c78cd6541fad15569490569ea1437fea74ec Mon Sep 17 00:00:00 2001 From: jason taylor Date: Fri, 28 Sep 2018 16:40:01 -0400 Subject: [PATCH] config: added ja3 to tls custom logging example Signed-off-by: jason taylor --- suricata.yaml.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/suricata.yaml.in b/suricata.yaml.in index c0811afd8f..c882a8aa48 100644 --- a/suricata.yaml.in +++ b/suricata.yaml.in @@ -176,7 +176,7 @@ outputs: #session-resumption: no # custom allows to control which tls fields that are included # in eve-log - #custom: [subject, issuer, session_resumed, serial, fingerprint, sni, version, not_before, not_after, certificate, chain] + #custom: [subject, issuer, session_resumed, serial, fingerprint, sni, version, not_before, not_after, certificate, chain, ja3] - files: force-magic: no # force logging magic on all logged files # force logging of checksums, available hash functions are md5, -- 2.47.2