doc: add documentation for Ja3GetHash Lua function

pull/3297/head
Mats Klepsland 8 years ago committed by Victor Julien
parent 195fa9d272
commit 2514553098

@ -508,6 +508,37 @@ Example:
end
end
JA3
---
JA3 must be enabled in the Suricata config file (set 'app-layer.protocols.tls.ja3-fingerprints' to 'yes').
Initialize with:
::
function init (args)
local needs = {}
needs["protocol"] = "tls"
return needs
end
Ja3GetHash
~~~~~~~~~~
Get the JA3 hash (md5sum of JA3 string) through Ja3GetHash.
Example:
::
function log (args)
hash = Ja3GetHash()
if hash == nil then
return
end
end
SSH
---

Loading…
Cancel
Save