mirror of
https://github.com/vel21ripn/nDPI.git
synced 2026-05-02 00:40:17 +00:00
- TCP fingerprint - JA4 fingepriint - TLS SHA1 certificate (if present), or JA3S fingerprint (is SHA1 is missing) By default the fingerprint uses the client and server fingerprints (format 0) and combines them. However you can chnge it format (eg. use only the client info, format 1) with --cfg NULL,metadata.ndpi_fingerprint_format,X where X is the fingerprint format. By default nDPI fingerprint is enabled but you can enable/disble it as follows --cfg NULL,metadata.ndpi_fingerprint,0 |
||
|---|---|---|
| .. | ||
| pcap | ||
| result | ||