]> git.ipfire.org Git - thirdparty/suricata.git/commit
ja4: implement for TLS and QUIC
authorSascha Steinbiss <satta@debian.org>
Sat, 24 Feb 2024 10:10:47 +0000 (11:10 +0100)
committerJeff Lucovsky <jlucovsky@oisf.net>
Sat, 8 Jun 2024 13:36:46 +0000 (09:36 -0400)
commit93fd349b3f2644175adc019f1597bdec2e010ba5
treef70432de54540fe4365d033b3e42e8e3c57cc39d
parentf48b48da652d7f215b212812a112f9eb7604aeae
ja4: implement for TLS and QUIC

Ticket: OISF#6379
(cherry picked from commit 120313f4daf2b2501f7ab098954e91f550413c96)
32 files changed:
configure.ac
doc/userguide/output/eve/eve-json-format.rst
doc/userguide/output/eve/eve-json-output.rst
doc/userguide/rules/index.rst
doc/userguide/rules/ja-keywords.rst [moved from doc/userguide/rules/ja3-keywords.rst with 60% similarity]
etc/schema.json
rust/Cargo.toml.in
rust/Makefile.am
rust/src/ja4.rs [new file with mode: 0644]
rust/src/lib.rs
rust/src/quic/detect.rs
rust/src/quic/frames.rs
rust/src/quic/logger.rs
rust/src/quic/quic.rs
src/Makefile.am
src/app-layer-ssl.c
src/app-layer-ssl.h
src/detect-engine-register.c
src/detect-engine-register.h
src/detect-ja4-hash.c [new file with mode: 0644]
src/detect-ja4-hash.h [new file with mode: 0644]
src/detect-parse.c
src/detect-tls-ja3-hash.c
src/detect-tls-ja3-string.c
src/detect-tls-ja3s-hash.c
src/detect-tls-ja3s-string.c
src/detect.h
src/feature.h
src/output-json-tls.c
src/suricata.c
src/util-ja4.h [new file with mode: 0644]
suricata.yaml.in