D4
/
sensor-d4-tls-fingerprinting
mirror of https://github.com/D4-project/sensor-d4-tls-fingerprinting
2
0
Fork 0
Code Issues Releases Wiki Activity

wip - nitpicking

DecodingLayerParser
Jean-Louis Huynen 2019-01-30 15:04:12 +01:00
parent 1212cf511c
commit e59ea05e57
2 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
README.md
View File

@ -1,7 +1,8 @@
# sensor-d4-tls-fingerprinting # sensor-d4-tls-fingerprinting
Extracts TLS certificates from pcap files or network interfaces (tcpreassembly is done thanks to gopacket), fingerprints TLS client/server interactions with ja3/ja3s and print output in JSON form. Extracts TLS certificates from pcap files or network interfaces (tcpreassembly is done thanks to gopacket), fingerprints TLS client/server interactions with ja3/ja3s and print output in JSON form.
# Use # Use
This project is currently in its very early stage and relies mainly on a customized version of ![gopacket](http://github.com/google/gopacket "gopacket link") that will be the subject of a pull request later on. This project is currently in its very early stage and relies on a customized version of ![gopacket](http://github.com/google/gopacket "gopacket link").
Check the list of issues.
## Install dependencies & go get ## Install dependencies & go get
``` shell ``` shell
$go get github.com/gallypette/gopacket $go get github.com/gallypette/gopacket

3
d4-tlsf.go
View File

@ -4,6 +4,9 @@ import (
"bytes" "bytes"
"crypto/md5" "crypto/md5"
"crypto/x509" "crypto/x509"
// TODO consider
//"github.com/google/certificate-transparency-go/x509"
"encoding/hex" "encoding/hex"
"encoding/json" "encoding/json"
"flag" "flag"