vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-28 23:19:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Remove obsolete JA3 support

Browse source
This commit is contained in:
Alfredo Cardigliano 2024-08-09 09:08:32 +02:00
parent 4b1b37103a
commit 548c9aeec5
28 changed files with 31 additions and 303 deletions
Download patch file Download diff file Expand all files Collapse all files

10
scripts/lua/modules/lua_utils.lua
View file

@ -1404,16 +1404,12 @@ function addTLSInfoToAlertDescr(msg, alert_json, json_format)
(table.len(alert_json["proto"]["tls"] or {}) > 0)) then
local tls_info = format_tls_info({
ja3_client_hash = alert_json["proto"]["tls"]["ja3_client_hash"],
issuerDN = alert_json["proto"]["tls"]["issuerDN"],
ja4_client_hash = alert_json["proto"]["tls"]["ja4_client_hash"],
tls_version = alert_json["proto"]["tls"]["tls_version"],
ja3_server_hash = alert_json["proto"]["tls"]["ja3_server_hash"],
ja3_server_cipher = alert_json["proto"]["tls"]["ja3_server_cipher"],
notBefore = alert_json["proto"]["tls"]["notBefore"],
notAfter = alert_json["proto"]["tls"]["notAfter"],
client_requested_server_name = alert_json["proto"]["tls"]["client_requested_server_name"],
['ja3.server_unsafe_cipher'] = alert_json["proto"]["tls"]["ja3.server_unsafe_cipher"]
}, json_format)
if json_format then
@ -1425,12 +1421,6 @@ function addTLSInfoToAlertDescr(msg, alert_json, json_format)
tls_info["tls_certificate_validity"])
end
if tls_info["ja3.server_unsafe_cipher"] then
msg = msg ..
string.format(" [ %s: %s ]", i18n("ja3.server_unsafe_cipher"),
tls_info["ja3.server_unsafe_cipher"])
end
if tls_info["client_requested_server_name"] then
msg = msg ..
string.format(" [ %s: %s ]", i18n("client_requested_server_name"),