Project

General

Profile

Actions
Copy link

Bug #7685

closed

tls: Invalid ja4 due to double client hello

Added by Philippe Antoine about 2 months ago. Updated about 1 month ago.

Status:
Rejected
Priority:
Normal
Assignee:
OISF Dev
Target version:
8.0.0-rc1
Affected Versions:
git master
Effort:
medium
Difficulty:
Label:

Description

What was done in #6634 for ja3 needs to be done for ja4 as well

Subtasks 1 (0 open — 1 closed)

Bug #7686: tls: Invalid ja4 due to double client hello (7.0.x backport)RejectedOISF DevActions

Related issues 3 (1 open — 2 closed)

Related to Suricata - Feature #6695: tls: log extensionsClosedGianni TedescoActions
Related to Suricata - Bug #7016: tls: hello retry request handling issuesNewOISF DevActions
Copied from Suricata - Bug #6634: tls: Invalid ja3 due to double client helloClosedPhilippe AntoineActions
Actions
Copy link
 #1

Updated by Philippe Antoine about 2 months ago

  • Copied from Bug #6634: tls: Invalid ja3 due to double client hello added
Actions
Copy link
 #2

Updated by Philippe Antoine about 2 months ago

  • Subtask #7686 added
Actions
Copy link
 #3

Updated by Philippe Antoine about 2 months ago

Actions
Copy link
 #4

Updated by Philippe Antoine about 1 month ago

  • Related to Bug #7016: tls: hello retry request handling issues added
Actions
Copy link
 #5

Updated by Philippe Antoine about 1 month ago

  • Status changed from New to Rejected

I do not have evidence of a bad ja4, so closing

#7016 may bring more info here

Actions
Copy link

Also available in: Atom PDF