Project

General

Profile

Actions

Bug #7685

closed

tls: Invalid ja4 due to double client hello

Added by Philippe Antoine 25 days ago. Updated 10 days ago.

Status:
Rejected
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
medium
Difficulty:
Label:

Description

What was done in #6634 for ja3 needs to be done for ja4 as well


Subtasks 1 (0 open1 closed)

Bug #7686: tls: Invalid ja4 due to double client hello (7.0.x backport)RejectedOISF DevActions

Related issues 3 (1 open2 closed)

Related to Suricata - Feature #6695: tls: log extensionsClosedGianni TedescoActions
Related to Suricata - Bug #7016: tls: hello retry request handling issuesNewOISF DevActions
Copied from Suricata - Bug #6634: tls: Invalid ja3 due to double client helloClosedPhilippe AntoineActions
Actions #1

Updated by Philippe Antoine 25 days ago

  • Copied from Bug #6634: tls: Invalid ja3 due to double client hello added
Actions #2

Updated by Philippe Antoine 25 days ago

  • Subtask #7686 added
Actions #3

Updated by Philippe Antoine 25 days ago

Actions #4

Updated by Philippe Antoine 16 days ago

  • Related to Bug #7016: tls: hello retry request handling issues added
Actions #5

Updated by Philippe Antoine 10 days ago

  • Status changed from New to Rejected

I do not have evidence of a bad ja4, so closing

#7016 may bring more info here

Actions

Also available in: Atom PDF