diff --git a/wireshark/source/packet-ja4.c b/wireshark/source/packet-ja4.c index 3f9bdc4..e1477b1 100644 --- a/wireshark/source/packet-ja4.c +++ b/wireshark/source/packet-ja4.c @@ -1495,7 +1495,7 @@ static int dissect_ja4(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void } if (strcmp(field->hfinfo->abbrev, "dhcp.option.type") == 0) { unsigned val = fvalue_get_uinteger(get_value_ptr(field)); - if (val != 0 && val != 53) { + if (val != 0 && val != 53 && val != 50 && val != 81) { wmem_strbuf_append_printf(ja4d_data.options, "%d-", val); } } diff --git a/wireshark/test/testdata/dhcp.pcapng.json b/wireshark/test/testdata/dhcp.pcapng.json index 78deeb8..e17ac2a 100644 --- a/wireshark/test/testdata/dhcp.pcapng.json +++ b/wireshark/test/testdata/dhcp.pcapng.json @@ -8,7 +8,7 @@ "1" ], "ja4.ja4d": [ - "disco0000in_61-50-55_1-3-6-42" + "disco0000in_61-55_1-3-6-42" ] } } @@ -36,7 +36,7 @@ "3" ], "ja4.ja4d": [ - "reqst0000in_61-50-54-55_1-3-6-42" + "reqst0000in_61-54-55_1-3-6-42" ] } }