search

FoxIO-LLC / ja4

JA4+ is a suite of network fingerprinting standards
https://foxio.io
Other
774 stars 65 forks source link

Add support for Zeek 5 #94

Closed J0eJ0h closed 2 months ago

J0eJ0h commented 2 months ago

The initial version of JA4+ for Zeek was using syntactic sugar that was added in Zeek 6 and would fail to compile then segfault on Zeek 5.

Thanks to Justin Azoff for identifying the cause of the segfault (using [] instead of RecordType() as a initializer).