search

salesforce / ja3

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.
BSD 3-Clause "New" or "Revised" License
2.76k stars 291 forks source link

provide sample pcaps and expected results #6

Open awick opened 7 years ago

awick commented 7 years ago

Would be great if you could provide some sample pcaps and the expected JA3 so we can verify our implementations. Definitely hit some trickyness when the tls header and hello headers had different values and which to use

awick commented 7 years ago

Feel free to grab some from https://github.com/aol/moloch/tree/master/tests/pcap if useful, although see https://github.com/aol/moloch/blob/master/tests/README for ones that we didn't create

Pierre990 commented 5 years ago

Hi I'm testing out the pyja3 (python scirpt that produces a JA3 based on a input pcap file) I see some some discrepancies between your expected JA3 output from a file corresponding test file and python ja3 scirpt.Is there someway that your test files are incorrect?

raqeebhamza commented 4 years ago

Can you tell me how i can use this Ja3 after using the command pip install pyja3 on windows 10 command prompt.