LeeBrotherston / tls-fingerprinting

TLS Fingerprinting
GNU General Public License v3.0
373 stars 81 forks source link

Dynamically Created Signatures #14

Closed LeeBrotherston closed 8 years ago

LeeBrotherston commented 8 years ago

This adds functionality to dynamically add signatures to the in-memory fingerprint database (not written to file at this point).

This means that when an unknown signature is encountered multiple times it will be inserted on the first instance and will appear as a "dynamic" fingerprint on subsequent times. This allows easier correlation between multiple instances to collate multiple collections, useful in attribution, etc.

The "-U" switch has been retired as there are no long "unknown" signatures, the signature is inserted into the in memory database.

In future may include updating the on-disk database too. Currently this requires editing the json file and using "fingerprintout.py -b" to create a new database file.