Project

General

Profile

Actions
Copy link

Bug #7685

closed
PA OD

tls: Invalid ja4 due to double client hello

Bug #7685: tls: Invalid ja4 due to double client hello

Added by Philippe Antoine 11 months ago. Updated 11 months ago.

Status:
Rejected
Priority:
Normal
Assignee:
OISF Dev
Target version:
8.0.0-rc1
Affected Versions:
git main
Effort:
medium
Difficulty:
Label:

Description

What was done in #6634 for ja3 needs to be done for ja4 as well

Subtasks 1 (0 open — 1 closed)

Bug #7686: tls: Invalid ja4 due to double client hello (7.0.x backport)RejectedOISF DevActions

Related issues 3 (1 open — 2 closed)

Related to Suricata - Feature #6695: tls: log extensionsClosedGianni TedescoActions
Related to Suricata - Bug #7016: tls: hello retry request handling issuesNewOISF DevActions
Copied from Suricata - Bug #6634: tls: Invalid ja3 due to double client helloClosedPhilippe AntoineActions

PA Updated by Philippe Antoine 11 months ago Actions
Copy link
 #1

  • Copied from Bug #6634: tls: Invalid ja3 due to double client hello added

PA Updated by Philippe Antoine 11 months ago Actions
Copy link
 #2

  • Subtask #7686 added

PA Updated by Philippe Antoine 11 months ago Actions
Copy link
 #3

PA Updated by Philippe Antoine 11 months ago Actions
Copy link
 #4

  • Related to Bug #7016: tls: hello retry request handling issues added

PA Updated by Philippe Antoine 11 months ago Actions
Copy link
 #5

  • Status changed from New to Rejected

I do not have evidence of a bad ja4, so closing

#7016 may bring more info here

Actions
Copy link

Also available in: PDF Atom