Add ja3 to search. (#6813)

This commit is contained in:
Nicolo Maio 2023-03-21 11:36:40 +00:00
parent 00e25ccd46
commit 33cd58af41
4 changed files with 22 additions and 1 deletions

View file

@ -602,6 +602,15 @@ if not is_system_interface then
what = "community_id"
label = i18n("db_search.find_in_historical", {what=what, query=query})
query = query .. tag_utils.SEPARATOR .. "eq"
elseif isJA3(query) then
--tprint("HERE")
what = "ja3_client"
label = i18n("db_search.find_in_historical", {what=what, query=query})
query = query .. tag_utils.SEPARATOR .. "eq"
results[#results + 1] = build_result(label, query, what, nil, nil, "historical")
what = "ja3_server"
label = i18n("db_search.find_in_historical", {what=what, query=query})
query = query .. tag_utils.SEPARATOR .. "eq"
else
what = "hostname"
label = i18n("db_search.find_in_historical", {what=what, query=query})