vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-30 16:09:32 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add JA4C report. (#8239)

Browse source
This commit is contained in:
Nicolo Maio 2024-02-23 12:23:30 +01:00
parent 09b264779d
commit 75779534b2
4 changed files with 36 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

24
scripts/lua/rest/v2/get/host/fingerprint/data.lua
View file

@ -59,15 +59,25 @@ end
stats = stats or {}
if fingerprint_type == "ja3" then
stats = stats and stats.ja3_fingerprint or {}
elseif fingerprint_type == "hassh" then
stats = stats and stats.hassh_fingerprint or {}
local function add_to_res(res, fingerprint_type, stats)
for key, value in pairs(stats) do
res[#res + 1] = value
if (fingerprint_type ~= "hassh") then
res[#res]["hash"] = key
res[#res]["type"] = string.upper(fingerprint_type)
else
res[#res][fingerprint_type] = key
end
end
return res
end
for key, value in pairs(stats) do
res[#res + 1] = value
res[#res][fingerprint_type] = key
if fingerprint_type == "ja3" then
-- If there are JA3 stats present, JA4 stats could also be present.
res = add_to_res(res, fingerprint_type, stats.ja3_fingerprint or {})
res = add_to_res(res, "ja4", stats.ja4_fingerprint or {})
elseif fingerprint_type == "hassh" then
res = add_to_res(res, fingerprint_type, stats.hassh_fingerprint or {})
end
rc = rest_utils.consts.success.ok