Remove obsolete JA3 support

This commit is contained in:
Alfredo Cardigliano 2024-08-09 09:08:32 +02:00
parent 4b1b37103a
commit 548c9aeec5
28 changed files with 31 additions and 303 deletions

View file

@ -136,9 +136,6 @@ end
local function parseTLSMetadata(event_tls, flow)
flow.tls_server_name = event_tls.sni
if event_tls.ja3 ~= nil then flow.ja3c_hash = event_tls.ja3.hash end
if event_tls.ja3s ~= nil then flow.ja3s_hash = event_tls.ja3s.hash end
-- Additional fields
flow.TLS_VERSION = event_tls.version
flow.TLS_CERT_NOT_BEFORE = event_tls.notbefore