vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-05-06 03:45:26 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Enable ja4 in fingerprint rest

Browse source
This commit is contained in:
Alfredo Cardigliano 2024-08-09 10:40:11 +02:00
parent 3c654f7a3e
commit cf34364ea5
2 changed files with 12 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

19
scripts/lua/rest/v1/get/host/fingerprint/data.lua
View file

@ -12,13 +12,10 @@ local fingerprint_utils = require "fingerprint_utils"
local rest_utils = require("rest_utils")
local available_fingerprints = {
-- TODO handle ja4 (ja3 is deprecated)
--[[
ja3 = {
stats_key = "ja3_fingerprint",
href = function(fp) return '<A class="ntopng-external-link" href="https://sslbl.abuse.ch/ja3-fingerprints/'..fp..'" target="_blank">'..fp..' <i class="fas fa-external-link-alt"></i></A>' end
ja4 = {
stats_key = "ja4_fingerprint",
href = function(fp) return '<A class="ntopng-external-link" href="https://ja4db.com" target="_blank">'..fp..' <i class="fas fa-external-link-alt"></i></A>' end
},
--]]
hassh = {
stats_key = "hassh_fingerprint",
href = function(fp) return fp end
@ -61,13 +58,9 @@ if(host_info["host"] ~= nil) then
end
stats = stats or {}
-- TODO handle ja4 (ja3 is deprecated)
--[[
if fingerprint_type == "ja3" then
stats = stats and stats.ja3_fingerprint or {}
else
--]]
if fingerprint_type == "hassh" then
if fingerprint_type == "ja4" then
stats = stats and stats.ja4_fingerprint or {}
elseif fingerprint_type == "hassh" then
stats = stats and stats.hassh_fingerprint or {}
end