salesforce / ja3

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.
BSD 3-Clause "New" or "Revised" License
2.61k stars 289 forks source link

getting the wrong JA3 hashes for chrome, edge etc #63

Open sgeohanl opened 3 years ago

sgeohanl commented 3 years ago

Hi! I'm not entirely familiar with JA3 but basically I have set up and configured Suricata with JA3 enabled etc but once I run Suricata, I seem to be getting the wrong hashes. I know this because I copy and paste them into https://ja3er.com/form and the hashes arent recognised, I'm testing it on the google chrome for reference. Any help would be greatly appreciated. I'm kinda new to IDS and JA3 so bare with me please!