./scripts/fingerprintout.py a bit buggy

LeeBrotherston / tls-fingerprinting

TLS Fingerprinting

GNU General Public License v3.0

373 stars 81 forks source link

./scripts/fingerprintout.py a bit buggy #36

Open Tributh opened 7 years ago

Tributh commented 7 years ago

Hi i used: ./scripts/fingerprintout.py -i ./fingerprints/fingerprints.json than 16 lines are never matching when running in suricata.

the end before the sid: ends with " content: "||"; rawbytes; distance: 0;" the content: "||" breaks suricata. i just removed this part by hand and see now matching rules. Regards Torsten

LeeBrotherston commented 7 years ago

Ah ok - that seems to be an easy enough fix.... I'll take a look at that.