vrr/nfstream
2
0
Fork 0
mirror of https://github.com/nfstream/nfstream.git synced 2026-05-19 16:28:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix client/server SSL fields.

Browse source
This commit is contained in:
Zied Aouini 2020-02-18 20:21:12 +01:00 • committed by GitHub
parent 1c3a98f0b6
commit b3fddf3bfa
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nfstream/plugin.py
View file

@ -221,8 +221,8 @@ def update_ndpi_infos(entry, ndpi_flow, ndpi_protocol, ndpi):
entry.client_info = ndpi.get_str_field(ndpi_flow.protos.ssh.client_signature)
entry.server_info = ndpi.get_str_field(ndpi_flow.protos.ssh.server_signature)
elif is_ndpi_proto(entry, 91) or ndpi.get_str_field(ndpi_flow.protos.stun_ssl.ssl.ja3_client) != '': # TLS
entry.client_info = ndpi.get_str_field(ndpi_flow.protos.stun_ssl.ssl.client_certificate)
entry.server_info = ndpi.get_str_field(ndpi_flow.protos.stun_ssl.ssl.server_certificate)
entry.client_info = ndpi.get_str_field(ndpi_flow.protos.stun_ssl.ssl.client_requested_server_name)
entry.server_info = ndpi.get_str_field(ndpi_flow.protos.stun_ssl.ssl.server_names)
entry.j3a_client = ndpi.get_str_field(ndpi_flow.protos.stun_ssl.ssl.ja3_client)
entry.j3a_server = ndpi.get_str_field(ndpi_flow.protos.stun_ssl.ssl.ja3_server)
else: