search

FoxIO-LLC / ja4

JA4+ is a suite of network fingerprinting standards
https://foxio.io
Other
775 stars 65 forks source link

python ja4ssh implementation was not counting SSH payloads #49

Closed noeltimothy closed 5 months ago

noeltimothy commented 5 months ago

When calculating ssh packets, the sample count should only consider SSH payloads. The Ack count should only consider zero-tcp payloads.