JA3 and JA4 value are not the same as Wireshark

wi1dcard / fingerproxy

Fingerproxy is an HTTPS reverse proxy. It creates JA3, JA4, Akamai HTTP2 fingerprints, and forwards to backend via HTTP request headers.

Apache License 2.0

129 stars 20 forks source link

JA3 and JA4 value are not the same as Wireshark #24

Open m2studio opened 2 weeks ago

m2studio commented 2 weeks ago

I have a HTTP client implemented with Scala language, I would like to know the JA3 and JA4 TLS fingerprint value. Then I decided to use this tool. However once I compare the values between this tool fingerproxy and wireshark , it gives me different values.

Do you know why and which one I can trust ?

wi1dcard commented 1 week ago

Hello, please share more info. For example, pcap file, your scala http client, JA3 and JA4 in fingerproxy and wireshark etc.