Actions
Support #2905
closedempty JA3 field
Status:
Closed
Priority:
Normal
Assignee:
-
Affected Versions:
Label:
Description
So I've been using Suricata version 4.1.2 and setup my suricata.yaml file so that it will log tls connections.When I tried test it using pcaps that I know have tls connections most of the time it doesn't log any sort of tls connection and when it does the ja3 is empty .I was wondering if there's some kind of bug ?
Files
Updated by Darren pierre about 5 years ago
Disregard this bug issue , the packets don't include a client Hello Packet
Updated by Peter Manev about 5 years ago
- Tracker changed from Bug to Support
- Status changed from New to Closed
Closed as requested.
Actions