Open davidgrewtr opened 4 years ago
Anyone? I know it might not be an issue with sleuth itself but I do not know where else to ask this.
I am not sure if sleuth can do that. Here is a relatively simple jq/command line query:
jq 'select(.tls? != 1) | select(.tls.cs[]?) | .tls.cs[]' joy-output.json | sort | uniq -c | sort -nr
I am using sleuth to calculate distribution of TLS offered cipher suites:-
./sleuth sample.gz --select "tls{cs}" --dist
This results in sleuth giving count of top combinations of cipher suites offered by the client e.g.,,
How can I use sleuth to calculate distribution of each individual "cs"? e.g.,: