Skip to content

Commit 1e4753b

Browse files
committed
Update client_fingerprint docs from JA3 to JA4
1 parent 745b117 commit 1e4753b

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

docs/api.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -132,7 +132,7 @@ In the following we detail each implemented feature.
132132
| `application_is_guessed` | `int` | Indicates if detection result is based on pure dissection or on a guess heuristics. |
133133
| `application_confidence` | `int` | Indicates the underlying detection method (O: Unknown classification, 1: Classification obtained looking only at the L4 ports, 3: Classification results based on partial/incomplete DPI information, 4: Classification results based on some LRU cache with partial/incomplete DPI information, 5: Classification results based on some LRU cache (i.e. correlation among sessions), 6: Deep packet inspection). |
134134
| `requested_server_name` | `str` | Requested server name (SSL/TLS, DNS, HTTP). |
135-
| `client_fingerprint` | `str` | Client fingerprint (DHCP fingerprint for DHCP, [JA3][ja3] for SSL/TLS and [HASSH][hassh] for SSH). |
135+
| `client_fingerprint` | `str` | Client fingerprint (DHCP fingerprint for DHCP, [JA4][ja4] for SSL/TLS and [HASSH][hassh] for SSH). |
136136
| `server_fingerprint` | `str` | Server fingerprint ([JA3][ja3] for SSL/TLS and [HASSH][hassh] for SSH). |
137137
| `user_agent` | `str` | Extracted user agent for HTTP or User Agent Identifier for QUIC. |
138138
| `content_type` | `str` | Extracted HTTP content type. |
@@ -420,5 +420,6 @@ for flow in ml_streamer:
420420

421421
[bpf]: https://biot.com/capstats/bpf.html
422422
[ja3]: https://github.com/salesforce/ja3
423+
[ja4]: https://github.com/FoxIO-LLC/ja4
423424
[hassh]: https://github.com/salesforce/hassh
424425
[plg]: https://github.com/nfstream/nfstream/tree/master/nfstream/plugins

0 commit comments

Comments
 (0)