Bug #7686: tls: Invalid ja4 due to double client hello (7.0.x backport) - Suricata - Open Information Security Foundation

Actions

Bug #7686

closed

Bug #7685: tls: Invalid ja4 due to double client hello

tls: Invalid ja4 due to double client hello (7.0.x backport)

Added by Philippe Antoine about 2 months ago. Updated about 1 month ago.

Status:

Rejected

Priority:

Normal

Assignee:

Target version:

Affected Versions:

Effort:

Difficulty:

Label:

Related issues 1 (0 open — 1 closed)

Actions

#1

Updated by Philippe Antoine about 2 months ago

Copied from Bug #7239: tls: Invalid ja3 due to double client hello (7.0.x backport) added

Actions

#2

Updated by Philippe Antoine about 2 months ago

Target version set to 7.0.11

Actions

#3

Updated by Philippe Antoine about 2 months ago

Assignee changed from Philippe Antoine to OISF Dev

Actions

#4

Updated by Philippe Antoine about 1 month ago

Subject changed from tls: Invalid ja3 due to double client hello (7.0.x backport) to tls: Invalid ja4 due to double client hello (7.0.x backport)

Actions

#5

Updated by Philippe Antoine about 1 month ago

Status changed from New to Rejected

I do not have evidence of a bad ja4, so closing

Actions

Also available in: Atom PDF