search

FoxIO-LLC / ja4

JA4+ is a suite of network fingerprinting standards
https://foxio.io
Other
774 stars 65 forks source link

fixed crash when ja4x has only one extension #117

Closed noeltimothy closed 1 month ago

noeltimothy commented 1 month ago

JA4X displays hases correctly now when there is only one extension

>python3 python/ja4.py --ja4x /mnt/c/Users/tnoel/Downloads/one-extension/one-extension.pcap --json -r
{
    "stream": 0,
    "src": "192.254.79.71",
    "dst": "10.2.2.101",
    "srcport": "443",
    "dstport": "49802",
    "JA4X.1": "2166164053c1_2166164053c1_30d204a01551"
}