search

phuslu / nginx-ssl-fingerprint

high performance ja3 and http2 fingerprint for nginx.
BSD 2-Clause "Simplified" License
145 stars 24 forks source link

HTTP2 fingerprint schema #40

Closed arlequin99 closed 7 months ago

arlequin99 commented 8 months ago

Most fingerprint schemas use the window_size_increment (http2.window_update.window_size_increment) field as second parameter:

[SETTINGS]|WINDOW_UPDATE|PRIORITY|Pseudo-Header-Order|HEADERS_FRAME|WINDOW_UPDATE

But here the second passed parameter is the http2.settings.initial_window_size

What's the reason for this?

phuslu commented 8 months ago

Should be a bug of implementation, thanks! Let me fix it soon. cc @deancn

phuslu commented 8 months ago

try fix in https://github.com/phuslu/nginx-ssl-fingerprint/commit/211d8604a3a812413a2c806d0026df467ca781d6

Please help a check, thanks again.

arlequin99 commented 8 months ago

Thanks. I made some extra tests, what is the value now ? Because it is not WINDOW_UPDATE (http2.window_update.window_size_increment)

Wireshark_zyVZq62p5V

phuslu commented 7 months ago

sorry for late reply, I try fix in master branch again. Could you please help verify again? thanks a lot!