vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-30 16:09:32 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Enable ja4 in fingerprint rest

Browse source
This commit is contained in:
Alfredo Cardigliano 2024-08-09 10:40:11 +02:00
parent 3c654f7a3e
commit cf34364ea5
2 changed files with 12 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

21
scripts/lua/rest/v2/get/host/fingerprint/data.lua
View file

@ -12,13 +12,10 @@ local fingerprint_utils = require "fingerprint_utils"
local rest_utils = require("rest_utils")
local available_fingerprints = {
-- TODO handle ja4 (ja3 is deprecated)
--[[
ja3 = {
stats_key = "ja3_fingerprint",
href = function(fp) return '<A class="ntopng-external-link" href="https://sslbl.abuse.ch/ja3-fingerprints/'..fp..'" target="_blank">'..fp..' <i class="fas fa-external-link-alt"></i></A>' end
ja4 = {
stats_key = "ja4_fingerprint",
href = function(fp) return '<A class="ntopng-external-link" href="https://ja4db.com" target="_blank">'..fp..' <i class="fas fa-external-link-alt"></i></A>' end
},
--]]
hassh = {
stats_key = "hassh_fingerprint",
href = function(fp) return fp end
@ -33,7 +30,6 @@ local ifid = _GET["ifid"]
local host_info = url2hostinfo(_GET)
local fingerprint_type = _GET["fingerprint_type"]
-- #####################################################################
local stats
@ -75,15 +71,10 @@ local function add_to_res(res, fingerprint_type, stats)
return res
end
-- TODO handle ja4 (ja3 is deprecated)
--[[
if fingerprint_type == "ja3" then
-- If there are JA3 stats present, JA4 stats could also be present.
res = add_to_res(res, fingerprint_type, stats.ja3_fingerprint or {})
if fingerprint_type == "ja4" then
res = add_to_res(res, fingerprint_type, stats.ja4_fingerprint or {})
res = add_to_res(res, "ja4", stats.ja4_fingerprint or {})
else
--]]
if fingerprint_type == "hassh" then
elseif fingerprint_type == "hassh" then
res = add_to_res(res, fingerprint_type, stats.hassh_fingerprint or {})
end