diff --git a/python/common.py b/python/common.py index e33d60c..1b4264b 100644 --- a/python/common.py +++ b/python/common.py @@ -25,6 +25,42 @@ '0x8a8a': True, '0x9a9a': True, '0xaaaa': True, '0xbaba': True, '0xcaca': True, '0xdada': True, '0xeaea': True, '0xfafa': True} +def _parse_tls_int(value): + if isinstance(value, int): + return value + s = str(value).strip().lower() + if s.startswith('0x'): + return int(s, 16) + if any(ch in 'abcdef' for ch in s): + return int(s, 16) + return int(s) + +def normalize_tls_list(values, width=4, prefix='0x'): + if values is None: + return [] + if not isinstance(values, list): + values = [values] + return [ f"{prefix}{_parse_tls_int(v):0{width}x}" for v in values ] + +def normalize_tls_value(value, width=4, prefix='0x'): + values = normalize_tls_list(value, width, prefix) + return values[0] if values else None + +def normalize_tls_fields(packet, extensions_prefix='0x'): + if not packet: + return packet + if 'extensions' in packet: + packet['extensions'] = normalize_tls_list(packet['extensions'], prefix=extensions_prefix) + if 'ciphers' in packet: + packet['ciphers'] = normalize_tls_list(packet['ciphers']) + if 'supported_versions' in packet: + packet['supported_versions'] = normalize_tls_list(packet['supported_versions']) + if 'version' in packet: + packet['version'] = normalize_tls_value(packet['version']) + if 'signature_algorithms' in packet: + packet['signature_algorithms'] = normalize_tls_list(packet['signature_algorithms']) + return packet + def delete_keys(keys, x): for key in keys: if key in x: @@ -172,5 +208,5 @@ def get_signature_algorithms(packet): except Exception as e: pass packet['signature_algorithms'] = packet['signature_algorithms'][alg_lengths[idx]:] - return [ x for x in packet['signature_algorithms'] if x not in GREASE_TABLE ] + return [ x for x in packet.get('signature_algorithms', []) if x not in GREASE_TABLE ] diff --git a/python/ja4.py b/python/ja4.py index 171ffd4..199995a 100644 --- a/python/ja4.py +++ b/python/ja4.py @@ -177,8 +177,8 @@ def to_ja4s(x, debug_stream): if 'ciphers' not in x: x['ciphers'] = [] + normalize_tls_fields(x, extensions_prefix='') # get extensions in hex in the order they are present (include grease values) - x['extensions'] = [ '{:04x}'.format(int(k)) for k in x['extensions'] ] ext_len = '{:02d}'.format(min(len(x['extensions']), 99)) if x['extensions']: @@ -187,7 +187,7 @@ def to_ja4s(x, debug_stream): extensions = '000000000000' # only one cipher for ja4s - x['ciphers'] = x['ciphers'][2:] + x['ciphers'] = x['ciphers'][0][2:] if x['ciphers'] else '' x['version'] = x['version'][0] if isinstance(x['version'], list) else x['version'] if 'supported_versions' in x: @@ -224,7 +224,7 @@ def to_ja4(x, debug_stream): if 'ciphers' not in x: x['ciphers'] = [] - x['extensions'] = [ '0x{:04x}'.format(int(k)) for k in x['extensions'] ] + normalize_tls_fields(x, extensions_prefix='0x') ext_len = '{:02d}'.format(min(len([ x for x in x['extensions'] if x not in GREASE_TABLE]), 99)) cache_update(x, 'client_ciphers', x['ciphers'], debug_stream) diff --git a/python/test/testdata/badcurveball.pcap.json b/python/test/testdata/badcurveball.pcap.json index eb3ea04..d813855 100644 --- a/python/test/testdata/badcurveball.pcap.json +++ b/python/test/testdata/badcurveball.pcap.json @@ -10,11 +10,11 @@ "JA4L-S": "781_238", "JA4L-C": "2181_64", "domain": "bad.curveballtest.com", - "JA4.1": "t00d1715h2_dd2c26892b57_8201b1be11a4", - "JA4_r.1": "t00d1715h2_,,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,ff01_27,52,25,83,53,81,54,37,3", - "JA4_o.1": "t00d1715h2_6c4ba73770eb_4848efb2a220", - "JA4_ro.1": "t00d1715h2_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,,_0000,0017,ff01,000a,000b,0023,0010,0005,000d,0012,0033,002d,002b,001b,0015_27,52,25,83,53,81,54,37,3", - "JA4S": "t0005h1_195_845f7282a956", + "JA4.1": "t13d1615h2_46e7e9700bed_45f260be83e2", + "JA4_r.1": "t13d1615h2_000a,002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,ff01_0403,0804,0401,0503,0805,0501,0806,0601,0201", + "JA4_o.1": "t13d1615h2_45f31bb0a5cc_b0e5d31d5128", + "JA4_ro.1": "t13d1615h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035,000a_0000,0017,ff01,000a,000b,0023,0010,0005,000d,0012,0033,002d,002b,001b,0015_0403,0804,0401,0503,0805,0501,0806,0601,0201", + "JA4S": "t1205h1_c02b_845f7282a956", "JA4X.1": "2e9214a636bc_a373a9f83c6b_0e17604154c5", "JA4X.2": "2e9214a636bc_2e9214a636bc_795797892f9c" } diff --git a/python/test/testdata/browsers-x509.pcapng.json b/python/test/testdata/browsers-x509.pcapng.json index 1722c33..3b56127 100644 --- a/python/test/testdata/browsers-x509.pcapng.json +++ b/python/test/testdata/browsers-x509.pcapng.json @@ -10,10 +10,10 @@ "JA4L-S": "1907_112", "JA4L-C": "278_128", "domain": "edge.microsoft.com", - "JA4.1": "t00d1616h2_4109672baa2e_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0200e8047a78_8a0afe6f3afd", - "JA4_ro.1": "t00d1616h2_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000d,0000,000a,0005,000b,002b,001b,ff01,0033,4469,002d,0023,0017,0012,0010,0015_27,52,25,83,53,81,54,37", + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_4237572e953b", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,0000,000a,0005,000b,002b,001b,ff01,0033,4469,002d,0023,0017,0012,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4X.1": "a373a9f83c6b_2bab15409345_0f2217ba412e", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_c34b04c10969" }, @@ -28,11 +28,11 @@ "JA4L-S": "7166_41", "JA4L-C": "349_128", "domain": "nym1-ib.adnxs.com", - "JA4.1": "t00d1616h2_c4e216e269f4_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,354,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_00d8772d9166_548bd83a577c", - "JA4_ro.1": "t00d1616h2_354,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002b,4469,000b,0017,000d,0000,001b,0005,0033,ff01,0010,000a,002d,0012,0023,0015_27,52,25,83,53,81,54,37", - "JA4S": "t0007h2_195_cf25e267ce22", + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_2da480b6a2c8", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002b,4469,000b,0017,000d,0000,001b,0005,0033,ff01,0010,000a,002d,0012,0023,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t1207h2_c02b_cf25e267ce22", "JA4X.1": "7d5dbb3783b4_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_7d5dbb3783b4_44440d41940c" }, @@ -47,11 +47,11 @@ "JA4L-S": "2948_229", "JA4L-C": "247_128", "domain": "lptag.liveperson.net", - "JA4.1": "t00d1616h2_73d9d18e4e10_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,018,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_828fc7e24cd3_0069bd55eedf", - "JA4_ro.1": "t00d1616h2_018,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0000,0033,0010,0017,ff01,0012,002b,000d,000a,002d,0005,0023,000b,4469,001b,0015_27,52,25,83,53,81,54,37", - "JA4S": "t0005h2_199_845f7282a956", + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_c4528f9c0199", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0000,0033,0010,0017,ff01,0012,002b,000d,000a,002d,0005,0023,000b,4469,001b,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t1205h2_c02f_845f7282a956", "JA4X.1": "2bab15409345_2e9214a636bc_b891c0ad6f32", "JA4X.2": "2bab15409345_2bab15409345_2367ce7fbc5b", "JA4X.3": "2bab15409345_2bab15409345_2030e37f3421" diff --git a/python/test/testdata/chrome-cloudflare-quic-with-secrets.pcapng.json b/python/test/testdata/chrome-cloudflare-quic-with-secrets.pcapng.json index 6b28c65..e76bca9 100644 --- a/python/test/testdata/chrome-cloudflare-quic-with-secrets.pcapng.json +++ b/python/test/testdata/chrome-cloudflare-quic-with-secrets.pcapng.json @@ -10,11 +10,11 @@ "JA4L-S": "5749_56", "JA4L-C": "149_64", "domain": "cloudflare-quic.com", - "JA4.1": "t00d1616h2_06835249484a_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,802_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_572e68ba0241_ac2009940b69", - "JA4_ro.1": "t00d1616h2_802,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0000,0017,ff01,000a,000b,0023,0010,0005,000d,0012,0033,002d,002b,001b,4469,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_234ea6891581", + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_2d79a7d73c2f", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0000,0017,ff01,000a,000b,0023,0010,0005,000d,0012,0033,002d,002b,001b,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_234ea6891581", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_44440d41940c" }, diff --git a/python/test/testdata/http2-with-cookies.pcapng.json b/python/test/testdata/http2-with-cookies.pcapng.json index 3da09d8..2c2539a 100644 --- a/python/test/testdata/http2-with-cookies.pcapng.json +++ b/python/test/testdata/http2-with-cookies.pcapng.json @@ -10,11 +10,11 @@ "JA4L-S": "44840_117", "JA4L-C": "470_128", "domain": "youtube.com", - "JA4.1": "t00d1616h2_73d9d18e4e10_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,018,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_828fc7e24cd3_ca0d6ae205f6", - "JA4_ro.1": "t00d1616h2_018,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002d,0012,0000,000b,4469,001b,ff01,0033,000d,0010,0005,000a,0017,002b,0023,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_234ea6891581", + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_e0fccb203dfb", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,0012,0000,000b,4469,001b,ff01,0033,000d,0010,0005,000a,0017,002b,0023,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_234ea6891581", "JA4X.1": "a373a9f83c6b_7022c563de38_2e3757343cb0", "JA4X.2": "a373a9f83c6b_a373a9f83c6b_5d71497f7704", "JA4X.3": "7d5dbb3783b4_a373a9f83c6b_2fbee3f04f3b" diff --git a/python/test/testdata/ipv6.pcapng.json b/python/test/testdata/ipv6.pcapng.json index 33ee7cf..1bb0a02 100644 --- a/python/test/testdata/ipv6.pcapng.json +++ b/python/test/testdata/ipv6.pcapng.json @@ -10,11 +10,11 @@ "JA4L-S": "18861_59", "JA4L-C": "3911_64", "domain": "www.cloudflare.com", - "JA4.1": "t00d4605h2_e9b8aa14296f_2bafe05263c3", - "JA4_r.1": "t00d4605h2_,,,,,,,,,,,,0,159,160,161,162,169,170,171,172,187,188,191,192,195,196,199,2,2,200,3,392,393,394,413,5,6,6,6,6,7,7,8,9,9_000a,000b,000d_37,39,423,81,83,25,27,166,909,9,1,3,5", - "JA4_o.1": "t00d4605h2_463625df507c_6af77b7964cc", - "JA4_ro.1": "t00d4605h2_200,196,192,188,172,162,9,7,,393,392,394,413,6,6,9,7,,,2,2,199,195,191,187,171,161,8,3,,0,,6,,,6,,169,159,,,170,160,,,5_0000,000b,000a,000d,0010_37,39,423,81,83,25,27,166,909,9,1,3,5", - "JA4S": "t0004h2_393_1428ce7b4018", + "JA4.1": "t12d4605h2_85626a9a5f7f_aaf95bb78ec9", + "JA4_r.1": "t12d4605h2_0004,0005,000a,0016,002f,0033,0035,0039,003c,003d,0041,0045,0067,006b,0081,0084,0088,009c,009d,009e,009f,00ba,00be,00c0,00c4,00ff,c007,c008,c009,c00a,c011,c012,c013,c014,c023,c024,c027,c028,c02b,c02c,c02f,c030,cca8,cca9,ccaa,ff85_000a,000b,000d_0601,0603,efef,0501,0503,0401,0403,eeee,eded,0301,0303,0201,0203", + "JA4_o.1": "t12d4605h2_644f5d117d98_094daec7ec8d", + "JA4_ro.1": "t12d4605h2_c030,c02c,c028,c024,c014,c00a,009f,006b,0039,cca9,cca8,ccaa,ff85,00c4,0088,0081,009d,003d,0035,00c0,0084,c02f,c02b,c027,c023,c013,c009,009e,0067,0033,00be,0045,009c,003c,002f,00ba,0041,c011,c007,0005,0004,c012,c008,0016,000a,00ff_0000,000b,000a,000d,0010_0601,0603,efef,0501,0503,0401,0403,eeee,eded,0301,0303,0201,0203", + "JA4S": "t1204h2_cca9_1428ce7b4018", "JA4X.1": "7d5dbb3783b4_ba7ce0880c07_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_7d5dbb3783b4_41a019652939" } diff --git a/python/test/testdata/latest.pcapng.json b/python/test/testdata/latest.pcapng.json index 8144089..0bb8786 100644 --- a/python/test/testdata/latest.pcapng.json +++ b/python/test/testdata/latest.pcapng.json @@ -10,11 +10,11 @@ "JA4L-S": "33804_227", "JA4L-C": "513_128", "domain": "pdx-col.eum-appdynamics.com", - "JA4.1": "t00d1616h2_4057d54ba945_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,906_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_faec7b756048_4ff83ae3fc4f", - "JA4_ro.1": "t00d1616h2_906,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0023,ff01,0000,001b,0012,4469,002d,002b,000d,0010,0033,000a,0005,0017,000b,0015_27,52,25,83,53,81,54,37", - "JA4S": "t0006h2_199_3603f09c43ba", + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_9aeef56da6aa", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,ff01,0000,001b,0012,4469,002d,002b,000d,0010,0033,000a,0005,0017,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t1206h2_c02f_3603f09c43ba", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_a83ffcd6e6c2" }, @@ -29,11 +29,11 @@ "JA4L-S": "7096_245", "JA4L-C": "449_128", "domain": "discovery.cem.cloud.us", - "JA4.1": "t00d190800_4d06a43e2d88_5027fbe6a38d", - "JA4_r.1": "t00d190800_,,,,,161,162,171,172,187,188,191,192,195,196,199,200,6,7_0005,000a,000b,000d,0017,0023,ff01_52,53,54,25,81,3,27,83,5,4,37,39", - "JA4_o.1": "t00d190800_be9ffe69a4f5_d558bccac42c", - "JA4_ro.1": "t00d190800_196,195,200,199,188,187,192,191,162,161,172,171,7,6,,,,,_0000,0005,000a,000b,000d,0023,0017,ff01_52,53,54,25,81,3,27,83,5,4,37,39", - "JA4S": "t000600_199_51ad275821ba", + "JA4.1": "t12d190800_d83cc789557e_7af1ed941c26", + "JA4_r.1": "t12d190800_000a,002f,0035,003c,003d,009c,009d,c009,c00a,c013,c014,c023,c024,c027,c028,c02b,c02c,c02f,c030_0005,000a,000b,000d,0017,0023,ff01_0804,0805,0806,0401,0501,0201,0403,0503,0203,0202,0601,0603", + "JA4_o.1": "t12d190800_e8d5f427a2c5_5e98404dd3cc", + "JA4_ro.1": "t12d190800_c02c,c02b,c030,c02f,c024,c023,c028,c027,c00a,c009,c014,c013,009d,009c,003d,003c,0035,002f,000a_0000,0005,000a,000b,000d,0023,0017,ff01_0804,0805,0806,0401,0501,0201,0403,0503,0203,0202,0601,0603", + "JA4S": "t120600_c02f_51ad275821ba", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_a83ffcd6e6c2" }, @@ -56,10 +56,10 @@ "JA4L-S": "42103_109", "JA4L-C": "513_128", "domain": "ping-edge.smartscreen.microsoft.com", - "JA4.1": "t00d1616h2_c4e216e269f4_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,354,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_00d8772d9166_7cabee5c7374", - "JA4_ro.1": "t00d1616h2_354,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000b,0023,002d,001b,000d,ff01,0012,0005,002b,0017,0000,0010,4469,000a,0033,0015_27,52,25,83,53,81,54,37", + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_ee5437a6a04b", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000b,0023,002d,001b,000d,ff01,0012,0005,002b,0017,0000,0010,4469,000a,0033,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4X.1": "a373a9f83c6b_2bab15409345_0f2217ba412e", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_c34b04c10969" }, @@ -74,10 +74,10 @@ "JA4L-S": "53595_109", "JA4L-C": "487_128", "domain": "data-edge.smartscreen.microsoft.com", - "JA4.1": "t00d1616h2_73d9d18e4e10_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,018,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_828fc7e24cd3_e87b6a2ca453", - "JA4_ro.1": "t00d1616h2_018,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0023,0000,000a,0033,001b,0005,ff01,000d,0017,4469,0010,002b,000b,0012,002d,0015_27,52,25,83,53,81,54,37", + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_7b772b20e97b", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,0000,000a,0033,001b,0005,ff01,000d,0017,4469,0010,002b,000b,0012,002d,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4X.1": "a373a9f83c6b_2bab15409345_0f2217ba412e", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_c34b04c10969" }, @@ -92,11 +92,11 @@ "JA4L-S": "14207_43", "JA4L-C": "188_128", "domain": "app.slack.com", - "JA4.1": "t00d1616h2_7ea02c1142d5_811abd909fb7", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,70_0005,000a,000b,000d,0012,0017,001b,0023,0029,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8b75d945926f_5f27f96077ac", - "JA4_ro.1": "t00d1616h2_70,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000d,0010,0000,000b,0023,4469,ff01,0033,000a,002d,002b,0005,0017,0012,001b,0029_27,52,25,83,53,81,54,37", - "JA4S": "t000300_65_6bbbaf601ed8" + "JA4.1": "t13d1516h2_8daaf6152771_9b887d9acb53", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,0029,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_ff8ca026d952", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,0010,0000,000b,0023,4469,ff01,0033,000a,002d,002b,0005,0017,0012,001b,0029_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130300_1301_6bbbaf601ed8" }, { "stream": 6, diff --git a/python/test/testdata/macos_tcp_flags.pcap.json b/python/test/testdata/macos_tcp_flags.pcap.json index c7cb752..8eabb07 100644 --- a/python/test/testdata/macos_tcp_flags.pcap.json +++ b/python/test/testdata/macos_tcp_flags.pcap.json @@ -10,10 +10,10 @@ "JA4L-S": "17255_63", "JA4L-C": "393_64", "domain": "venarisecurity.com", - "JA4.1": "t00d2613h2_0096994bd7a3_d4d083ab1cc3", - "JA4_r.1": "t00d2613h2_,,,,,160,161,162,170,171,172,187,188,191,192,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,002b,002d,0033,ff01_27,52,25,83,5,53,53,81,54,37,3", - "JA4_o.1": "t00d2613h2_28a84d664ec3_59cdbd16dec2", - "JA4_ro.1": "t00d2613h2_65,66,67,196,195,188,187,162,161,393,200,199,192,191,172,171,392,7,6,,,,,160,170,_ff01,0000,0017,000d,0005,0012,0010,000b,0033,002d,002b,000a,0015_27,52,25,83,5,53,53,81,54,37,3", - "JA4S": "t000200_65_234ea6891581" + "JA4.1": "t13d2613h2_2802a3db6c62_845d286b0d67", + "JA4_r.1": "t13d2613h2_000a,002f,0035,003c,003d,009c,009d,1301,1302,1303,c008,c009,c00a,c012,c013,c014,c023,c024,c027,c028,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,002b,002d,0033,ff01_0403,0804,0401,0503,0203,0805,0805,0501,0806,0601,0201", + "JA4_o.1": "t13d2613h2_78a7dc604b78_93870a65b655", + "JA4_ro.1": "t13d2613h2_1301,1302,1303,c02c,c02b,c024,c023,c00a,c009,cca9,c030,c02f,c028,c027,c014,c013,cca8,009d,009c,003d,003c,0035,002f,c008,c012,000a_ff01,0000,0017,000d,0005,0012,0010,000b,0033,002d,002b,000a,0015_0403,0804,0401,0503,0203,0805,0805,0501,0806,0601,0201", + "JA4S": "t130200_1301_234ea6891581" } ] \ No newline at end of file diff --git a/python/test/testdata/ssh2.pcapng.json b/python/test/testdata/ssh2.pcapng.json index 2577819..2aebdfb 100644 --- a/python/test/testdata/ssh2.pcapng.json +++ b/python/test/testdata/ssh2.pcapng.json @@ -10,11 +10,11 @@ "JA4L-S": "12517_53", "JA4L-C": "414_128", "domain": "updates.opendns.com", - "JA4.1": "t00d190800_4d06a43e2d88_5027fbe6a38d", - "JA4_r.1": "t00d190800_,,,,,161,162,171,172,187,188,191,192,195,196,199,200,6,7_0005,000a,000b,000d,0017,0023,ff01_52,53,54,25,81,3,27,83,5,4,37,39", - "JA4_o.1": "t00d190800_be9ffe69a4f5_d558bccac42c", - "JA4_ro.1": "t00d190800_196,195,200,199,188,187,192,191,162,161,172,171,7,6,,,,,_0000,0005,000a,000b,000d,0023,0017,ff01_52,53,54,25,81,3,27,83,5,4,37,39", - "JA4S": "t000400_199_4993ccf7354b", + "JA4.1": "t12d190800_d83cc789557e_7af1ed941c26", + "JA4_r.1": "t12d190800_000a,002f,0035,003c,003d,009c,009d,c009,c00a,c013,c014,c023,c024,c027,c028,c02b,c02c,c02f,c030_0005,000a,000b,000d,0017,0023,ff01_0804,0805,0806,0401,0501,0201,0403,0503,0203,0202,0601,0603", + "JA4_o.1": "t12d190800_e8d5f427a2c5_5e98404dd3cc", + "JA4_ro.1": "t12d190800_c02c,c02b,c030,c02f,c024,c023,c028,c027,c00a,c009,c014,c013,009d,009c,003d,003c,0035,002f,000a_0000,0005,000a,000b,000d,0023,0017,ff01_0804,0805,0806,0401,0501,0201,0403,0503,0203,0202,0601,0603", + "JA4S": "t120400_c02f_4993ccf7354b", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_a83ffcd6e6c2" }, @@ -29,11 +29,11 @@ "JA4L-S": "55492_235", "JA4L-C": "234_128", "domain": "mcs2-cloudstation-eu-west-1.prod.hydra.sophos.com", - "JA4.1": "t00d1909h2_4d06a43e2d88_5027fbe6a38d", - "JA4_r.1": "t00d1909h2_,,,,,161,162,171,172,187,188,191,192,195,196,199,200,6,7_0005,000a,000b,000d,0017,0023,ff01_52,53,54,25,81,3,27,83,5,4,37,39", - "JA4_o.1": "t00d1909h2_be9ffe69a4f5_4365fbc5b8ad", - "JA4_ro.1": "t00d1909h2_196,195,200,199,188,187,192,191,162,161,172,171,7,6,,,,,_0000,0005,000a,000b,000d,0023,0010,0017,ff01_52,53,54,25,81,3,27,83,5,4,37,39", - "JA4S": "t000500_199_6471ab80eb72", + "JA4.1": "t12d1909h2_d83cc789557e_7af1ed941c26", + "JA4_r.1": "t12d1909h2_000a,002f,0035,003c,003d,009c,009d,c009,c00a,c013,c014,c023,c024,c027,c028,c02b,c02c,c02f,c030_0005,000a,000b,000d,0017,0023,ff01_0804,0805,0806,0401,0501,0201,0403,0503,0203,0202,0601,0603", + "JA4_o.1": "t12d1909h2_e8d5f427a2c5_5da3d607c71a", + "JA4_ro.1": "t12d1909h2_c02c,c02b,c030,c02f,c024,c023,c028,c027,c00a,c009,c014,c013,009d,009c,003d,003c,0035,002f,000a_0000,0005,000a,000b,000d,0023,0010,0017,ff01_0804,0805,0806,0401,0501,0201,0403,0503,0203,0202,0601,0603", + "JA4S": "t120500_c02f_6471ab80eb72", "JA4X.1": "f7a0b866a27b_30b9c68c9fc8_8f2dd91f85ae", "JA4X.2": "f7a0b866a27b_f7a0b866a27b_b189698ac141" }, @@ -48,10 +48,10 @@ "JA4L-S": "49308_110", "JA4L-C": "161_128", "domain": "self.events.data.microsoft.com", - "JA4.1": "t00d190800_4d06a43e2d88_5027fbe6a38d", - "JA4_r.1": "t00d190800_,,,,,161,162,171,172,187,188,191,192,195,196,199,200,6,7_0005,000a,000b,000d,0017,0023,ff01_52,53,54,25,81,3,27,83,5,4,37,39", - "JA4_o.1": "t00d190800_be9ffe69a4f5_d558bccac42c", - "JA4_ro.1": "t00d190800_196,195,200,199,188,187,192,191,162,161,172,171,7,6,,,,,_0000,0005,000a,000b,000d,0023,0017,ff01_52,53,54,25,81,3,27,83,5,4,37,39", + "JA4.1": "t12d190800_d83cc789557e_7af1ed941c26", + "JA4_r.1": "t12d190800_000a,002f,0035,003c,003d,009c,009d,c009,c00a,c013,c014,c023,c024,c027,c028,c02b,c02c,c02f,c030_0005,000a,000b,000d,0017,0023,ff01_0804,0805,0806,0401,0501,0201,0403,0503,0203,0202,0601,0603", + "JA4_o.1": "t12d190800_e8d5f427a2c5_5e98404dd3cc", + "JA4_ro.1": "t12d190800_c02c,c02b,c030,c02f,c024,c023,c028,c027,c00a,c009,c014,c013,009d,009c,003d,003c,0035,002f,000a_0000,0005,000a,000b,000d,0023,0017,ff01_0804,0805,0806,0401,0501,0201,0403,0503,0203,0202,0601,0603", "JA4X.1": "a373a9f83c6b_2bab15409345_0f2217ba412e", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_c34b04c10969" }, @@ -66,10 +66,10 @@ "JA4L-S": "3217_119", "JA4L-C": "563_128", "domain": "www.bing.com", - "JA4.1": "t00d1616h2_92d14b0b55fe_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,82_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_d4f7c34455ff_7bca467ce5a0", - "JA4_ro.1": "t00d1616h2_82,65,66,67,195,199,196,200,393,392,171,172,6,7,,_001b,0017,0023,0033,002d,0005,0010,0012,ff01,000a,000d,000b,002b,4469,0000,0015_27,52,25,83,53,81,54,37", + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_76a3fc549f70", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,0017,0023,0033,002d,0005,0010,0012,ff01,000a,000d,000b,002b,4469,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4X.1": "a373a9f83c6b_7022c563de38_0ce9ea683d50", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_44440d41940c" }, @@ -84,11 +84,11 @@ "JA4L-S": "18693_241", "JA4L-C": "236_128", "domain": "4.sophosxl.net", - "JA4.1": "t00d1909h2_4d06a43e2d88_5027fbe6a38d", - "JA4_r.1": "t00d1909h2_,,,,,161,162,171,172,187,188,191,192,195,196,199,200,6,7_0005,000a,000b,000d,0017,0023,ff01_52,53,54,25,81,3,27,83,5,4,37,39", - "JA4_o.1": "t00d1909h2_be9ffe69a4f5_4365fbc5b8ad", - "JA4_ro.1": "t00d1909h2_196,195,200,199,188,187,192,191,162,161,172,171,7,6,,,,,_0000,0005,000a,000b,000d,0023,0010,0017,ff01_52,53,54,25,81,3,27,83,5,4,37,39", - "JA4S": "t000200_199_344b4dce5a52", + "JA4.1": "t12d1909h2_d83cc789557e_7af1ed941c26", + "JA4_r.1": "t12d1909h2_000a,002f,0035,003c,003d,009c,009d,c009,c00a,c013,c014,c023,c024,c027,c028,c02b,c02c,c02f,c030_0005,000a,000b,000d,0017,0023,ff01_0804,0805,0806,0401,0501,0201,0403,0503,0203,0202,0601,0603", + "JA4_o.1": "t12d1909h2_e8d5f427a2c5_5da3d607c71a", + "JA4_ro.1": "t12d1909h2_c02c,c02b,c030,c02f,c024,c023,c028,c027,c00a,c009,c014,c013,009d,009c,003d,003c,0035,002f,000a_0000,0005,000a,000b,000d,0023,0010,0017,ff01_0804,0805,0806,0401,0501,0201,0403,0503,0203,0202,0601,0603", + "JA4S": "t120200_c02f_344b4dce5a52", "JA4X.1": "a373a9f83c6b_7022c563de38_7bf9a7bf7029", "JA4X.2": "a373a9f83c6b_a373a9f83c6b_3684c5172069", "JA4X.3": "2bab15409345_a373a9f83c6b_44ce05048d28", diff --git a/python/test/testdata/tls-alpn-h2.pcap.json b/python/test/testdata/tls-alpn-h2.pcap.json index 33ee7cf..1bb0a02 100644 --- a/python/test/testdata/tls-alpn-h2.pcap.json +++ b/python/test/testdata/tls-alpn-h2.pcap.json @@ -10,11 +10,11 @@ "JA4L-S": "18861_59", "JA4L-C": "3911_64", "domain": "www.cloudflare.com", - "JA4.1": "t00d4605h2_e9b8aa14296f_2bafe05263c3", - "JA4_r.1": "t00d4605h2_,,,,,,,,,,,,0,159,160,161,162,169,170,171,172,187,188,191,192,195,196,199,2,2,200,3,392,393,394,413,5,6,6,6,6,7,7,8,9,9_000a,000b,000d_37,39,423,81,83,25,27,166,909,9,1,3,5", - "JA4_o.1": "t00d4605h2_463625df507c_6af77b7964cc", - "JA4_ro.1": "t00d4605h2_200,196,192,188,172,162,9,7,,393,392,394,413,6,6,9,7,,,2,2,199,195,191,187,171,161,8,3,,0,,6,,,6,,169,159,,,170,160,,,5_0000,000b,000a,000d,0010_37,39,423,81,83,25,27,166,909,9,1,3,5", - "JA4S": "t0004h2_393_1428ce7b4018", + "JA4.1": "t12d4605h2_85626a9a5f7f_aaf95bb78ec9", + "JA4_r.1": "t12d4605h2_0004,0005,000a,0016,002f,0033,0035,0039,003c,003d,0041,0045,0067,006b,0081,0084,0088,009c,009d,009e,009f,00ba,00be,00c0,00c4,00ff,c007,c008,c009,c00a,c011,c012,c013,c014,c023,c024,c027,c028,c02b,c02c,c02f,c030,cca8,cca9,ccaa,ff85_000a,000b,000d_0601,0603,efef,0501,0503,0401,0403,eeee,eded,0301,0303,0201,0203", + "JA4_o.1": "t12d4605h2_644f5d117d98_094daec7ec8d", + "JA4_ro.1": "t12d4605h2_c030,c02c,c028,c024,c014,c00a,009f,006b,0039,cca9,cca8,ccaa,ff85,00c4,0088,0081,009d,003d,0035,00c0,0084,c02f,c02b,c027,c023,c013,c009,009e,0067,0033,00be,0045,009c,003c,002f,00ba,0041,c011,c007,0005,0004,c012,c008,0016,000a,00ff_0000,000b,000a,000d,0010_0601,0603,efef,0501,0503,0401,0403,eeee,eded,0301,0303,0201,0203", + "JA4S": "t1204h2_cca9_1428ce7b4018", "JA4X.1": "7d5dbb3783b4_ba7ce0880c07_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_7d5dbb3783b4_41a019652939" } diff --git a/python/test/testdata/tls-handshake.pcapng.json b/python/test/testdata/tls-handshake.pcapng.json index 26d5cc2..11da5cd 100644 --- a/python/test/testdata/tls-handshake.pcapng.json +++ b/python/test/testdata/tls-handshake.pcapng.json @@ -6,11 +6,11 @@ "srcport": "50122", "dstport": "443", "domain": "lp-push-server-452.lastpass.com", - "JA4.1": "t00d1616h1_73d9d18e4e10_bed3546ee6f4", - "JA4_r.1": "t00d1616h1_,,018,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h1_828fc7e24cd3_89403d34d704", - "JA4_ro.1": "t00d1616h1_018,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000d,0033,0000,ff01,002b,0023,002d,0005,0012,000b,0017,4469,0010,001b,000a,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000300_200_bec8bdbaef8a", + "JA4.1": "t13d1516h1_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h1_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h1_acb858a92679_5eba26eeae83", + "JA4_ro.1": "t13d1516h1_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,0033,0000,ff01,002b,0023,002d,0005,0012,000b,0017,4469,0010,001b,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t120300_c030_bec8bdbaef8a", "JA4X.1": "a373a9f83c6b_2bab15409345_5a6862e71bea", "JA4X.2": "0b479b1b5763_a373a9f83c6b_2fbee3f04f3b" }, @@ -21,11 +21,11 @@ "srcport": "50157", "dstport": "443", "domain": "statics-marketingsites-eus-ms-com.akamaized.net", - "JA4.1": "t00d1616h2_6307a8b4e18c_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,466,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_09a40e5600a4_15ef7e1f7aa9", - "JA4_ro.1": "t00d1616h2_466,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,ff01,002b,0000,4469,001b,000b,0012,0005,000d,0017,002d,0010,000a,0023,0015_27,52,25,83,53,81,54,37", - "JA4S": "t0006h1_195_9bd66850b8f2", + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_687a3a2ce3c4", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,ff01,002b,0000,4469,001b,000b,0012,0005,000d,0017,002d,0010,000a,0023,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t1206h1_c02b_9bd66850b8f2", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_a83ffcd6e6c2" }, @@ -36,11 +36,11 @@ "srcport": "50158", "dstport": "443", "domain": "img-prod-cms-rt-microsoft-com.akamaized.net", - "JA4.1": "t00d1616h2_9d59fcccb793_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,578,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0e3e4812791b_1e75d5233100", - "JA4_ro.1": "t00d1616h2_578,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0010,0012,001b,000b,002d,0017,002b,0005,0023,000a,4469,000d,ff01,0033,0000,0015_27,52,25,83,53,81,54,37", - "JA4S": "t0006h2_195_9bd66850b8f2", + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_397d290f0301", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,0012,001b,000b,002d,0017,002b,0005,0023,000a,4469,000d,ff01,0033,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t1206h2_c02b_9bd66850b8f2", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_a83ffcd6e6c2" }, @@ -51,11 +51,11 @@ "srcport": "50164", "dstport": "443", "domain": "wcpstatic.microsoft.com", - "JA4.1": "t00d1616h2_06835249484a_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,802_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_572e68ba0241_798d2f271f6f", - "JA4_ro.1": "t00d1616h2_802,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000b,0005,0000,0017,000a,0033,002b,0012,000d,ff01,0010,0023,002d,001b,4469,0015_27,52,25,83,53,81,54,37", - "JA4S": "t0006h2_199_46cf7c3c6b8f", + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_942bc1763a61", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000b,0005,0000,0017,000a,0033,002b,0012,000d,ff01,0010,0023,002d,001b,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t1206h2_c02f_46cf7c3c6b8f", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_a83ffcd6e6c2", "JA4X.3": "7d5dbb3783b4_7d5dbb3783b4_f269f029c206" @@ -67,10 +67,10 @@ "srcport": "50167", "dstport": "443", "domain": "login.live.com", - "JA4.1": "t00d1616h2_73d9d18e4e10_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,018,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_828fc7e24cd3_8af5184c75f5", - "JA4_ro.1": "t00d1616h2_018,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000b,0033,0000,ff01,000a,002d,0023,0012,000d,4469,0017,002b,001b,0005,0010,0015_27,52,25,83,53,81,54,37", + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_b5e0789e757f", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000b,0033,0000,ff01,000a,002d,0023,0012,000d,4469,0017,002b,001b,0005,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_44440d41940c" }, @@ -81,11 +81,11 @@ "srcport": "50170", "dstport": "443", "domain": "target.microsoft.com", - "JA4.1": "t00d1616h2_c4e216e269f4_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,354,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_00d8772d9166_610f21c992f2", - "JA4_ro.1": "t00d1616h2_354,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0017,ff01,001b,0023,0000,0033,000a,000b,0005,0010,000d,0012,002d,4469,002b,0015_27,52,25,83,53,81,54,37", - "JA4S": "t0004h2_199_1428ce7b4018", + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_4360d1c81b7c", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,ff01,001b,0023,0000,0033,000a,000b,0005,0010,000d,0012,002d,4469,002b,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t1204h2_c02f_1428ce7b4018", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_a83ffcd6e6c2", "JA4X.3": "7d5dbb3783b4_7d5dbb3783b4_f269f029c206" @@ -97,11 +97,11 @@ "srcport": "50112", "dstport": "443", "domain": "clientservices.googleapis.com", - "JA4.1": "t00d1616h2_4109672baa2e_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0200e8047a78_2fc760fab8bb", - "JA4_ro.1": "t00d1616h2_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,_ff01,0033,002d,0005,4469,000d,0010,0023,001b,002b,0000,0012,000a,0017,000b,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_234ea6891581" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_8fc3c02244b2", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_ff01,0033,002d,0005,4469,000d,0010,0023,001b,002b,0000,0012,000a,0017,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_234ea6891581" }, { "stream": 1, @@ -110,11 +110,11 @@ "srcport": "50113", "dstport": "443", "domain": "www.google.com", - "JA4.1": "t00d1616h2_06835249484a_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,802_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_572e68ba0241_16a20564e4a6", - "JA4_ro.1": "t00d1616h2_802,65,66,67,195,199,196,200,393,392,171,172,6,7,,_001b,0017,ff01,0010,000d,002b,0005,0023,0033,0000,0012,000b,000a,4469,002d,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_234ea6891581" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_2331e95fde68", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,0017,ff01,0010,000d,002b,0005,0023,0033,0000,0012,000b,000a,4469,002d,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_234ea6891581" }, { "stream": 2, @@ -123,11 +123,11 @@ "srcport": "50114", "dstport": "443", "domain": "accounts.google.com", - "JA4.1": "t00d1616h2_a4a0f159df49_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,242,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_a70fd968ce15_e559b0da29d0", - "JA4_ro.1": "t00d1616h2_242,65,66,67,195,199,196,200,393,392,171,172,6,7,,_001b,0000,0033,0010,4469,0017,002d,000d,0005,0023,0012,002b,ff01,000b,000a,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_234ea6891581" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_18f69afefd3d", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,0000,0033,0010,4469,0017,002d,000d,0005,0023,0012,002b,ff01,000b,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_234ea6891581" }, { "stream": 3, @@ -136,11 +136,11 @@ "srcport": "50115", "dstport": "443", "domain": "www.googleapis.com", - "JA4.1": "t00d1616h2_7ea02c1142d5_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,70_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8b75d945926f_0557d6d97bf7", - "JA4_ro.1": "t00d1616h2_70,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0005,0000,ff01,0010,4469,001b,002d,002b,0023,000d,0012,000b,0033,000a,0017,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_234ea6891581" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_c8388c21e187", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0005,0000,ff01,0010,4469,001b,002d,002b,0023,000d,0012,000b,0033,000a,0017,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_234ea6891581" }, { "stream": 4, @@ -149,11 +149,11 @@ "srcport": "50116", "dstport": "443", "domain": "lastpass.com", - "JA4.1": "t00d1616h2_4057d54ba945_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,906_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_faec7b756048_c528162cda70", - "JA4_ro.1": "t00d1616h2_906,65,66,67,195,199,196,200,393,392,171,172,6,7,,_ff01,0005,002b,001b,000a,0033,000b,000d,0000,002d,0023,0012,0017,0010,4469,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_3af4d4b9d2d4", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_ff01,0005,002b,001b,000a,0033,000b,000d,0000,002d,0023,0012,0017,0010,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 6, @@ -162,11 +162,11 @@ "srcport": "50123", "dstport": "5228", "domain": "mtalk.google.com", - "JA4.1": "t00d161400_4109672baa2e_81116c3a4ed4", - "JA4_r.1": "t00d161400_,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d161400_0200e8047a78_f23aaf66726d", - "JA4_ro.1": "t00d161400_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,002b,001b,0000,0012,002d,000d,000a,0005,0023,0017,ff01,000b,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_234ea6891581" + "JA4.1": "t13d151400_8daaf6152771_de4a06bb82e3", + "JA4_r.1": "t13d151400_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d151400_acb858a92679_2f4561be1d1f", + "JA4_ro.1": "t13d151400_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,002b,001b,0000,0012,002d,000d,000a,0005,0023,0017,ff01,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_234ea6891581" }, { "stream": 7, @@ -175,11 +175,11 @@ "srcport": "50126", "dstport": "443", "domain": "www.gstatic.com", - "JA4.1": "t00d1616h2_7ea02c1142d5_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,70_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8b75d945926f_e670d63b8984", - "JA4_ro.1": "t00d1616h2_70,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0005,000b,ff01,0033,0017,001b,000a,4469,002b,0012,002d,0010,0023,000d,0000,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_234ea6891581" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_73544b4297c0", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0005,000b,ff01,0033,0017,001b,000a,4469,002b,0012,002d,0010,0023,000d,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_234ea6891581" }, { "stream": 8, @@ -188,11 +188,11 @@ "srcport": "50127", "dstport": "443", "domain": "ogs.google.com", - "JA4.1": "t00d1616h2_3d6d7dc826de_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_4f3397ca584e_69b3a448b66d", - "JA4_ro.1": "t00d1616h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_001b,000d,ff01,000b,002d,4469,0010,0017,002b,0012,0033,000a,0005,0000,0023,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_234ea6891581" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_1314decb33ff", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,000d,ff01,000b,002d,4469,0010,0017,002b,0012,0033,000a,0005,0000,0023,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_234ea6891581" }, { "stream": 9, @@ -201,11 +201,11 @@ "srcport": "50128", "dstport": "443", "domain": "aa.google.com", - "JA4.1": "t00d1616h2_4124bb9c93d9_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,026,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_9a2f5ecdd7aa_66406454524c", - "JA4_ro.1": "t00d1616h2_026,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0023,002d,0033,0010,001b,002b,0005,000a,000d,ff01,0000,0012,0017,4469,000b,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_234ea6891581" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_330ce4f319a8", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,002d,0033,0010,001b,002b,0005,000a,000d,ff01,0000,0012,0017,4469,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_234ea6891581" }, { "stream": 10, @@ -214,11 +214,11 @@ "srcport": "50130", "dstport": "443", "domain": "safebrowsing.googleapis.com", - "JA4.1": "t00d1616h2_4057d54ba945_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,906_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_faec7b756048_eb0606475d5b", - "JA4_ro.1": "t00d1616h2_906,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0010,4469,000d,0000,0017,0033,002b,0012,ff01,0023,002d,000b,001b,0005,000a,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_234ea6891581" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_b16532485edd", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,4469,000d,0000,0017,0033,002b,0012,ff01,0023,002d,000b,001b,0005,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_234ea6891581" }, { "stream": 11, @@ -227,11 +227,11 @@ "srcport": "50131", "dstport": "443", "domain": "www.facebook.com", - "JA4.1": "t00d1616h2_a4a0f159df49_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,242,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_a70fd968ce15_a5b11a3e561b", - "JA4_ro.1": "t00d1616h2_242,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,4469,0017,002d,000a,000b,ff01,000d,0023,002b,001b,0005,0000,0010,0012,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_427cac041d07", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,4469,0017,002d,000a,000b,ff01,000d,0023,002b,001b,0005,0000,0010,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 12, @@ -240,11 +240,11 @@ "srcport": "50134", "dstport": "443", "domain": "static.xx.fbcdn.net", - "JA4.1": "t00d1616h2_c4e216e269f4_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,354,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_00d8772d9166_9130eaf0760a", - "JA4_ro.1": "t00d1616h2_354,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000d,ff01,0012,002d,001b,000a,0000,0017,0023,0033,0005,002b,0010,000b,4469,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_538a2f938823", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,ff01,0012,002d,001b,000a,0000,0017,0023,0033,0005,002b,0010,000b,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 13, @@ -253,11 +253,11 @@ "srcport": "50132", "dstport": "443", "domain": "static.xx.fbcdn.net", - "JA4.1": "t00d1616h2_7ea02c1142d5_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,70_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8b75d945926f_fd81d2c25fc3", - "JA4_ro.1": "t00d1616h2_70,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,0010,000d,0017,4469,0000,001b,0023,0012,0005,000a,000b,ff01,002d,002b,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_686a0be4bd30", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,0010,000d,0017,4469,0000,001b,0023,0012,0005,000a,000b,ff01,002d,002b,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 14, @@ -266,11 +266,11 @@ "srcport": "50135", "dstport": "443", "domain": "static.xx.fbcdn.net", - "JA4.1": "t00d1616h2_3d6d7dc826de_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_4f3397ca584e_906cedfb752f", - "JA4_ro.1": "t00d1616h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_001b,0023,000b,0017,0000,002d,002b,0033,000d,0005,0010,4469,ff01,000a,0012,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_b7e224026524", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,0023,000b,0017,0000,002d,002b,0033,000d,0005,0010,4469,ff01,000a,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 15, @@ -279,11 +279,11 @@ "srcport": "50133", "dstport": "443", "domain": "static.xx.fbcdn.net", - "JA4.1": "t00d1616h2_4109672baa2e_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0200e8047a78_72b3a495f80c", - "JA4_ro.1": "t00d1616h2_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000a,0033,0000,000b,4469,0005,000d,0017,002d,002b,ff01,001b,0023,0010,0012,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_2861a6985939", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000a,0033,0000,000b,4469,0005,000d,0017,002d,002b,ff01,001b,0023,0010,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 16, @@ -292,11 +292,11 @@ "srcport": "50136", "dstport": "443", "domain": "static.xx.fbcdn.net", - "JA4.1": "t00d1616h2_1232493564c0_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,794_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_390f8e2ebadd_670c37f08900", - "JA4_ro.1": "t00d1616h2_794,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002d,0010,000a,002b,4469,0000,0033,0017,001b,0023,000d,0012,ff01,0005,000b,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_7889df4981c5", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,0010,000a,002b,4469,0000,0033,0017,001b,0023,000d,0012,ff01,0005,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 17, @@ -305,11 +305,11 @@ "srcport": "50137", "dstport": "443", "domain": "static.xx.fbcdn.net", - "JA4.1": "t00d1616h2_3d6d7dc826de_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_4f3397ca584e_5738aa05c719", - "JA4_ro.1": "t00d1616h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0023,0005,000b,4469,0017,0012,ff01,000d,0010,001b,000a,0033,002b,002d,0000,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_8173fc330948", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,0005,000b,4469,0017,0012,ff01,000d,0010,001b,000a,0033,002b,002d,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 18, @@ -318,11 +318,11 @@ "srcport": "50139", "dstport": "443", "domain": "scontent-iad3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_9d59fcccb793_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,578,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0e3e4812791b_14d2c97ac0d7", - "JA4_ro.1": "t00d1616h2_578,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0017,ff01,000a,002b,001b,4469,000b,0010,0023,0033,0005,000d,002d,0012,0000,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_2af320308976", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,ff01,000a,002b,001b,4469,000b,0010,0023,0033,0005,000d,002d,0012,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 19, @@ -331,11 +331,11 @@ "srcport": "50140", "dstport": "443", "domain": "gateway.facebook.com", - "JA4.1": "t00d1616h1_4109672baa2e_bed3546ee6f4", - "JA4_r.1": "t00d1616h1_,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h1_0200e8047a78_f7150114d838", - "JA4_ro.1": "t00d1616h1_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0012,4469,0010,000a,002b,0033,001b,0017,0023,000b,0000,0005,ff01,002d,000d,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h1_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h1_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h1_acb858a92679_4d217f5c60c0", + "JA4_ro.1": "t13d1516h1_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,4469,0010,000a,002b,0033,001b,0017,0023,000b,0000,0005,ff01,002d,000d,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 20, @@ -344,11 +344,11 @@ "srcport": "50142", "dstport": "443", "domain": "scontent-lga3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_1232493564c0_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,794_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_390f8e2ebadd_d13963cf6322", - "JA4_ro.1": "t00d1616h2_794,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002b,0017,002d,0005,4469,000d,0012,0023,000a,001b,ff01,0033,000b,0000,0010,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_0ba12093491f", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002b,0017,002d,0005,4469,000d,0012,0023,000a,001b,ff01,0033,000b,0000,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 21, @@ -357,11 +357,11 @@ "srcport": "50141", "dstport": "443", "domain": "scontent-mia3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_4057d54ba945_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,906_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_faec7b756048_c6caae0df2a3", - "JA4_ro.1": "t00d1616h2_906,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0000,002b,000d,0010,002d,001b,000b,0023,ff01,0017,0012,0033,0005,4469,000a,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_55d7fff9dff7", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0000,002b,000d,0010,002d,001b,000b,0023,ff01,0017,0012,0033,0005,4469,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 22, @@ -370,11 +370,11 @@ "srcport": "50143", "dstport": "443", "domain": "scontent.fewr1-6.fna.fbcdn.net", - "JA4.1": "t00d1616h2_c4e216e269f4_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,354,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_00d8772d9166_9d334f2534f6", - "JA4_ro.1": "t00d1616h2_354,65,66,67,195,199,196,200,393,392,171,172,6,7,,_4469,000b,0033,002b,ff01,0000,0017,0023,001b,002d,000a,0010,0012,000d,0005,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_e089cde5ad66", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_4469,000b,0033,002b,ff01,0000,0017,0023,001b,002d,000a,0010,0012,000d,0005,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 23, @@ -383,11 +383,11 @@ "srcport": "50145", "dstport": "443", "domain": "video-iad3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_c4e216e269f4_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,354,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_00d8772d9166_9d48320b88ee", - "JA4_ro.1": "t00d1616h2_354,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002d,0010,0012,002b,0005,001b,0017,000d,4469,0033,0000,000b,ff01,0023,000a,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_c1d170c535e5", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,0010,0012,002b,0005,001b,0017,000d,4469,0033,0000,000b,ff01,0023,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 24, @@ -396,11 +396,11 @@ "srcport": "50146", "dstport": "443", "domain": "video-iad3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_7ea02c1142d5_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,70_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8b75d945926f_2492b4cc2c88", - "JA4_ro.1": "t00d1616h2_70,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0012,000d,0023,001b,0005,002d,000b,0017,ff01,002b,4469,0033,000a,0000,0010,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_9be69fbcfb74", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,000d,0023,001b,0005,002d,000b,0017,ff01,002b,4469,0033,000a,0000,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 25, @@ -409,11 +409,11 @@ "srcport": "50144", "dstport": "443", "domain": "video-iad3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_c4e216e269f4_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,354,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_00d8772d9166_ceefb737daed", - "JA4_ro.1": "t00d1616h2_354,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0017,0010,0000,0033,001b,0012,000d,0023,0005,ff01,000b,002d,000a,002b,4469,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_8d31aaae1631", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,0010,0000,0033,001b,0012,000d,0023,0005,ff01,000b,002d,000a,002b,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 26, @@ -422,11 +422,11 @@ "srcport": "50147", "dstport": "443", "domain": "video-iad3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_4124bb9c93d9_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,026,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_9a2f5ecdd7aa_39017488afb6", - "JA4_ro.1": "t00d1616h2_026,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0010,0000,000b,000a,0023,0012,002b,002d,000d,ff01,0017,4469,0005,0033,001b,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_07af8028e23e", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,0000,000b,000a,0023,0012,002b,002d,000d,ff01,0017,4469,0005,0033,001b,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 27, @@ -435,11 +435,11 @@ "srcport": "50148", "dstport": "443", "domain": "video-iad3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_4124bb9c93d9_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,026,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_9a2f5ecdd7aa_b98c92ff41fe", - "JA4_ro.1": "t00d1616h2_026,65,66,67,195,199,196,200,393,392,171,172,6,7,,_4469,000d,0017,0023,002b,0005,0010,002d,001b,0000,0012,000b,000a,0033,ff01,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_3ec2c7066647", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_4469,000d,0017,0023,002b,0005,0010,002d,001b,0000,0012,000b,000a,0033,ff01,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 28, @@ -448,11 +448,11 @@ "srcport": "50149", "dstport": "443", "domain": "video-iad3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_267b3aae5f67_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,130,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8282cc1561ee_bcbb1ceeb308", - "JA4_ro.1": "t00d1616h2_130,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000a,ff01,0010,002b,000b,0000,4469,0017,0012,000d,002d,0033,0023,001b,0005,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_a9cc25f93fb0", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000a,ff01,0010,002b,000b,0000,4469,0017,0012,000d,002d,0033,0023,001b,0005,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 29, @@ -461,11 +461,11 @@ "srcport": "50151", "dstport": "443", "domain": "content-autofill.googleapis.com", - "JA4.1": "t00d1616h2_c4e216e269f4_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,354,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_00d8772d9166_49eedbd2eea8", - "JA4_ro.1": "t00d1616h2_354,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0023,0010,0000,0005,0033,ff01,4469,002d,0012,000d,001b,0017,000a,002b,000b,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_234ea6891581" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_5cfab8711ae5", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,0010,0000,0005,0033,ff01,4469,002d,0012,000d,001b,0017,000a,002b,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_234ea6891581" }, { "stream": 30, @@ -474,11 +474,11 @@ "srcport": "50152", "dstport": "443", "domain": "edge-chat.facebook.com", - "JA4.1": "t00d1616h1_4124bb9c93d9_bed3546ee6f4", - "JA4_r.1": "t00d1616h1_,,026,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h1_9a2f5ecdd7aa_7a52b4f1d573", - "JA4_ro.1": "t00d1616h1_026,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002d,0000,0023,000d,0017,0005,0010,0012,ff01,002b,001b,000b,000a,0033,4469,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h1_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h1_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h1_acb858a92679_a5ce045fadd3", + "JA4_ro.1": "t13d1516h1_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,0000,0023,000d,0017,0005,0010,0012,ff01,002b,001b,000b,000a,0033,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 31, @@ -487,11 +487,11 @@ "srcport": "50153", "dstport": "443", "domain": "edge-chat.facebook.com", - "JA4.1": "t00d1617h1_06835249484a_a5cb12758aa4", - "JA4_r.1": "t00d1617h1_,,171,172,195,196,199,200,392,393,6,65,66,67,7,802_0005,000a,000b,000d,0012,0015,0017,001b,0023,0029,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1617h1_572e68ba0241_c1502c9f74cb", - "JA4_ro.1": "t00d1617h1_802,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0000,0017,0005,002b,0012,0023,000a,0033,0010,002d,001b,4469,000b,000d,ff01,0015,0029_27,52,25,83,53,81,54,37", - "JA4S": "t000300_65_0ee26285a86f" + "JA4.1": "t13d1517h1_8daaf6152771_6cdcb247c39b", + "JA4_r.1": "t13d1517h1_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,0029,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1517h1_acb858a92679_98b2855b1dea", + "JA4_ro.1": "t13d1517h1_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0000,0017,0005,002b,0012,0023,000a,0033,0010,002d,001b,4469,000b,000d,ff01,0015,0029_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130300_1301_0ee26285a86f" }, { "stream": 32, @@ -500,11 +500,11 @@ "srcport": "50155", "dstport": "443", "domain": "www.microsoft.com", - "JA4.1": "t00d1616h2_92d14b0b55fe_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,82_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_d4f7c34455ff_8124b0d5bee2", - "JA4_ro.1": "t00d1616h2_82,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,0005,000b,0000,001b,0023,002d,000d,ff01,4469,002b,0017,0010,0012,000a,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_4aa408e2c085", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,0005,000b,0000,001b,0023,002d,000d,ff01,4469,002b,0017,0010,0012,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 35, @@ -513,11 +513,11 @@ "srcport": "50160", "dstport": "443", "domain": "cdn-dynmedia-1.microsoft.com", - "JA4.1": "t00d1616h2_3d6d7dc826de_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_4f3397ca584e_2da15b9b255a", - "JA4_ro.1": "t00d1616h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0023,000b,0005,0000,000d,ff01,4469,0012,0017,002b,001b,002d,000a,0033,0010,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_da9349461c3b", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,000b,0005,0000,000d,ff01,4469,0012,0017,002b,001b,002d,000a,0033,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 36, @@ -526,11 +526,11 @@ "srcport": "50162", "dstport": "443", "domain": "cdn-dynmedia-1.microsoft.com", - "JA4.1": "t00d1616h2_6307a8b4e18c_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,466,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_09a40e5600a4_a253dbabe7a2", - "JA4_ro.1": "t00d1616h2_466,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0012,0023,000a,000b,0000,0005,ff01,4469,002b,0017,001b,002d,000d,0033,0010,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_497901d2ace7", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,0023,000a,000b,0000,0005,ff01,4469,002b,0017,001b,002d,000d,0033,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 37, @@ -539,11 +539,11 @@ "srcport": "50161", "dstport": "443", "domain": "cdn-dynmedia-1.microsoft.com", - "JA4.1": "t00d1616h2_92d14b0b55fe_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,82_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_d4f7c34455ff_1388c893a486", - "JA4_ro.1": "t00d1616h2_82,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000a,0012,002b,ff01,0000,0017,000d,000b,002d,001b,4469,0010,0033,0023,0005,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_81dcec84e300", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000a,0012,002b,ff01,0000,0017,000d,000b,002d,001b,4469,0010,0033,0023,0005,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 38, @@ -552,15 +552,15 @@ "srcport": "50159", "dstport": "443", "domain": "mem.gfx.ms", - "JA4.1": "t00d1616h2_3d6d7dc826de_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_4f3397ca584e_69a5b7ced5c7", - "JA4_ro.1": "t00d1616h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0005,001b,0033,002d,4469,000a,000d,0012,ff01,000b,0023,002b,0000,0017,0010,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250", - "JA4.2": "t00d1615h2_3d6d7dc826de_3020f1a04d4a", - "JA4_r.2": "t00d1615h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.2": "t00d1615h2_4f3397ca584e_5fa93c695689", - "JA4_ro.2": "t00d1615h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0005,001b,0033,002d,4469,000a,000d,0012,ff01,000b,0023,002b,0000,0017,0010_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_0e6a3d869d9d", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0005,001b,0033,002d,4469,000a,000d,0012,ff01,000b,0023,002b,0000,0017,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250", + "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", + "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.2": "t13d1515h2_acb858a92679_b90d13bf6f98", + "JA4_ro.2": "t13d1515h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0005,001b,0033,002d,4469,000a,000d,0012,ff01,000b,0023,002b,0000,0017,0010_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 39, @@ -569,11 +569,11 @@ "srcport": "50163", "dstport": "443", "domain": "via.placeholder.com", - "JA4.1": "t00d1616h2_e54801c2e950_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,138,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_229fbafadc6d_a1f5eff5fd8b", - "JA4_ro.1": "t00d1616h2_138,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000d,002b,4469,0012,0023,002d,0000,000b,0033,000a,0005,0017,ff01,001b,0010,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_8b5fc429a01a", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,002b,4469,0012,0023,002d,0000,000b,0033,000a,0005,0017,ff01,001b,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 41, @@ -582,15 +582,15 @@ "srcport": "50165", "dstport": "443", "domain": "js.monitor.azure.com", - "JA4.1": "t00d1616h2_3d6d7dc826de_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_4f3397ca584e_5b66e173035f", - "JA4_ro.1": "t00d1616h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0012,000d,001b,002b,0000,4469,0023,ff01,0033,000a,0017,002d,000b,0010,0005,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250", - "JA4.2": "t00d1615h2_3d6d7dc826de_3020f1a04d4a", - "JA4_r.2": "t00d1615h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.2": "t00d1615h2_4f3397ca584e_ec4845452946", - "JA4_ro.2": "t00d1615h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0012,000d,001b,002b,0000,4469,0023,ff01,0033,000a,0017,002d,000b,0010,0005_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_5ec2817d7b86", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,000d,001b,002b,0000,4469,0023,ff01,0033,000a,0017,002d,000b,0010,0005,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250", + "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", + "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.2": "t13d1515h2_acb858a92679_b0ba2f989aea", + "JA4_ro.2": "t13d1515h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,000d,001b,002b,0000,4469,0023,ff01,0033,000a,0017,002d,000b,0010,0005_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 42, @@ -599,15 +599,15 @@ "srcport": "50166", "dstport": "443", "domain": "mem.gfx.ms", - "JA4.1": "t00d1616h2_e54801c2e950_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,138,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_229fbafadc6d_5c57d7d34ca4", - "JA4_ro.1": "t00d1616h2_138,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0017,001b,000b,0012,0010,002b,ff01,0033,0005,0000,0023,000a,002d,4469,000d,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250", - "JA4.2": "t00d1615h2_e54801c2e950_3020f1a04d4a", - "JA4_r.2": "t00d1615h2_,,138,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.2": "t00d1615h2_229fbafadc6d_910416100b12", - "JA4_ro.2": "t00d1615h2_138,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0017,001b,000b,0012,0010,002b,ff01,0033,0005,0000,0023,000a,002d,4469,000d_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_fbf4c64f425f", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,001b,000b,0012,0010,002b,ff01,0033,0005,0000,0023,000a,002d,4469,000d,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250", + "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", + "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.2": "t13d1515h2_acb858a92679_c95bfa41ab5d", + "JA4_ro.2": "t13d1515h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,001b,000b,0012,0010,002b,ff01,0033,0005,0000,0023,000a,002d,4469,000d_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 44, @@ -616,15 +616,15 @@ "srcport": "50168", "dstport": "443", "domain": "logincdn.msauth.net", - "JA4.1": "t00d1616h2_92d14b0b55fe_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,82_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_d4f7c34455ff_f7f9b3ff40de", - "JA4_ro.1": "t00d1616h2_82,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002b,001b,000a,0033,0012,0005,000d,0000,002d,0017,0010,ff01,4469,000b,0023,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250", - "JA4.2": "t00d1615h2_92d14b0b55fe_3020f1a04d4a", - "JA4_r.2": "t00d1615h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,82_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.2": "t00d1615h2_d4f7c34455ff_cef006b50a55", - "JA4_ro.2": "t00d1615h2_82,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002b,001b,000a,0033,0012,0005,000d,0000,002d,0017,0010,ff01,4469,000b,0023_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_f044a1abfa22", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002b,001b,000a,0033,0012,0005,000d,0000,002d,0017,0010,ff01,4469,000b,0023,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250", + "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", + "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.2": "t13d1515h2_acb858a92679_253bca5d0b80", + "JA4_ro.2": "t13d1515h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002b,001b,000a,0033,0012,0005,000d,0000,002d,0017,0010,ff01,4469,000b,0023_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 45, @@ -633,15 +633,15 @@ "srcport": "50169", "dstport": "443", "domain": "mem.gfx.ms", - "JA4.1": "t00d1616h2_6307a8b4e18c_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,466,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_09a40e5600a4_3cfec2a9591f", - "JA4_ro.1": "t00d1616h2_466,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0017,ff01,0023,002b,002d,000d,0005,001b,000a,4469,0010,0000,0033,000b,0012,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250", - "JA4.2": "t00d1615h2_6307a8b4e18c_3020f1a04d4a", - "JA4_r.2": "t00d1615h2_,,171,172,195,196,199,200,392,393,466,6,65,66,67,7_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.2": "t00d1615h2_09a40e5600a4_b65077d6af85", - "JA4_ro.2": "t00d1615h2_466,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0017,ff01,0023,002b,002d,000d,0005,001b,000a,4469,0010,0000,0033,000b,0012_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_3395779fe3fb", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,ff01,0023,002b,002d,000d,0005,001b,000a,4469,0010,0000,0033,000b,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250", + "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", + "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.2": "t13d1515h2_acb858a92679_1fea980e9d76", + "JA4_ro.2": "t13d1515h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,ff01,0023,002b,002d,000d,0005,001b,000a,4469,0010,0000,0033,000b,0012_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 47, @@ -650,11 +650,11 @@ "srcport": "50172", "dstport": "443", "domain": "www.apple.com", - "JA4.1": "t00d1616h2_4109672baa2e_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0200e8047a78_7dacaec9656d", - "JA4_ro.1": "t00d1616h2_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000d,0005,002d,4469,0012,ff01,0023,0017,000a,0000,0033,0010,000b,001b,002b,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_cf768f5c9444", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,0005,002d,4469,0012,ff01,0023,0017,000a,0000,0033,0010,000b,001b,002b,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 48, @@ -663,11 +663,11 @@ "srcport": "50175", "dstport": "443", "domain": "is1-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_e54801c2e950_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,138,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_229fbafadc6d_3ecba0861e51", - "JA4_ro.1": "t00d1616h2_138,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0010,000a,0005,4469,0033,002d,0017,0012,000b,001b,0023,ff01,002b,000d,0000,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_6e8cce17e7d7", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,000a,0005,4469,0033,002d,0017,0012,000b,001b,0023,ff01,002b,000d,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 49, @@ -676,11 +676,11 @@ "srcport": "50174", "dstport": "443", "domain": "is1-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_4057d54ba945_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,906_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_faec7b756048_1595299e0424", - "JA4_ro.1": "t00d1616h2_906,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000a,0000,0033,0023,0017,002d,4469,001b,0010,ff01,000d,0012,002b,0005,000b,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_f825e233d654", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000a,0000,0033,0023,0017,002d,4469,001b,0010,ff01,000d,0012,002b,0005,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 50, @@ -689,11 +689,11 @@ "srcport": "50177", "dstport": "443", "domain": "is2-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_9d59fcccb793_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,578,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0e3e4812791b_f162ffa569aa", - "JA4_ro.1": "t00d1616h2_578,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0023,4469,002b,002d,0000,0005,000a,ff01,001b,0017,0010,0033,000b,0012,000d,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_021f89855834", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,4469,002b,002d,0000,0005,000a,ff01,001b,0017,0010,0033,000b,0012,000d,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 51, @@ -702,11 +702,11 @@ "srcport": "50176", "dstport": "443", "domain": "is2-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_267b3aae5f67_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,130,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8282cc1561ee_6f6e7aeeeaff", - "JA4_ro.1": "t00d1616h2_130,65,66,67,195,199,196,200,393,392,171,172,6,7,,_4469,000a,001b,000b,0000,0023,000d,0017,002b,0033,ff01,002d,0005,0012,0010,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_883fa5a7a13b", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_4469,000a,001b,000b,0000,0023,000d,0017,002b,0033,ff01,002d,0005,0012,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 52, @@ -715,11 +715,11 @@ "srcport": "50178", "dstport": "443", "domain": "is2-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_4109672baa2e_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0200e8047a78_504535a8f093", - "JA4_ro.1": "t00d1616h2_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,0023,0005,001b,0000,002d,0017,4469,000b,000d,0012,ff01,000a,002b,0010,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_dfed22113221", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,0023,0005,001b,0000,002d,0017,4469,000b,000d,0012,ff01,000a,002b,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 53, @@ -728,11 +728,11 @@ "srcport": "50180", "dstport": "443", "domain": "is3-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_73d9d18e4e10_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,018,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_828fc7e24cd3_41b37e45f393", - "JA4_ro.1": "t00d1616h2_018,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0010,0017,0023,0012,0000,002b,002d,000a,000b,ff01,000d,0033,4469,0005,001b,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_d50c88625340", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,0017,0023,0012,0000,002b,002d,000a,000b,ff01,000d,0033,4469,0005,001b,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 54, @@ -741,11 +741,11 @@ "srcport": "50182", "dstport": "443", "domain": "is3-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_7ea02c1142d5_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,70_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8b75d945926f_11ffca9cd0b3", - "JA4_ro.1": "t00d1616h2_70,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0005,0010,000a,000b,002b,000d,001b,002d,4469,0023,0033,0000,ff01,0012,0017,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_26c01394417b", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0005,0010,000a,000b,002b,000d,001b,002d,4469,0023,0033,0000,ff01,0012,0017,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 55, @@ -754,11 +754,11 @@ "srcport": "50181", "dstport": "443", "domain": "is3-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_e54801c2e950_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,138,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_229fbafadc6d_b26e58a385ad", - "JA4_ro.1": "t00d1616h2_138,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0010,0012,002b,000a,000b,ff01,0005,000d,0023,001b,0033,0017,4469,0000,002d,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_0c4877241e3c", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,0012,002b,000a,000b,ff01,0005,000d,0023,001b,0033,0017,4469,0000,002d,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 56, @@ -767,11 +767,11 @@ "srcport": "50179", "dstport": "443", "domain": "is2-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_1232493564c0_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,794_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_390f8e2ebadd_29f6b1a8b311", - "JA4_ro.1": "t00d1616h2_794,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002d,0023,ff01,0000,000b,0017,0033,000a,002b,0005,000d,0012,4469,001b,0010,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_0c637659a2d5", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,0023,ff01,0000,000b,0017,0033,000a,002b,0005,000d,0012,4469,001b,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 57, @@ -780,11 +780,11 @@ "srcport": "50183", "dstport": "443", "domain": "is5-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_6307a8b4e18c_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,466,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_09a40e5600a4_7d5766b8de50", - "JA4_ro.1": "t00d1616h2_466,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,0000,0010,0023,0017,002d,4469,000a,0005,ff01,001b,002b,000b,000d,0012,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_66_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_f0c0f532ba7c", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,0000,0010,0023,0017,002d,4469,000a,0005,ff01,001b,002b,000b,000d,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1302_a56c5b993250" }, { "stream": 58, @@ -793,10 +793,10 @@ "srcport": "50184", "dstport": "443", "domain": "content-autofill.googleapis.com", - "JA4.1": "t00d1616h2_267b3aae5f67_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,130,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8282cc1561ee_675811c43dd5", - "JA4_ro.1": "t00d1616h2_130,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0000,0033,000d,0023,000b,ff01,000a,001b,4469,0012,002d,0010,0005,002b,0017,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_234ea6891581" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_5276cb03a33b", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0000,0033,000d,0023,000b,ff01,000a,001b,4469,0012,002d,0010,0005,002b,0017,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_234ea6891581" } ] \ No newline at end of file diff --git a/python/test/testdata/tls-non-ascii-alpn.pcapng.json b/python/test/testdata/tls-non-ascii-alpn.pcapng.json index 1a54030..0022617 100644 --- a/python/test/testdata/tls-non-ascii-alpn.pcapng.json +++ b/python/test/testdata/tls-non-ascii-alpn.pcapng.json @@ -6,10 +6,10 @@ "srcport": "50112", "dstport": "443", "domain": "clientservices.googleapis.com", - "JA4.1": "t00d161699_4109672baa2e_bed3546ee6f4", - "JA4_r.1": "t00d161699_,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d161699_0200e8047a78_2fc760fab8bb", - "JA4_ro.1": "t00d161699_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,_ff01,0033,002d,0005,4469,000d,0010,0023,001b,002b,0000,0012,000a,0017,000b,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_234ea6891581" + "JA4.1": "t13d151699_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d151699_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d151699_acb858a92679_8fc3c02244b2", + "JA4_ro.1": "t13d151699_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_ff01,0033,002d,0005,4469,000d,0010,0023,001b,002b,0000,0012,000a,0017,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_234ea6891581" } ] \ No newline at end of file diff --git a/python/test/testdata/tls-sni.pcapng.json b/python/test/testdata/tls-sni.pcapng.json index 5b7dac8..89c31c8 100644 --- a/python/test/testdata/tls-sni.pcapng.json +++ b/python/test/testdata/tls-sni.pcapng.json @@ -6,10 +6,10 @@ "srcport": "50112", "dstport": "443", "domain": "clientservices.googleapis.com", - "JA4.1": "t00d1616h2_4109672baa2e_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0200e8047a78_2fc760fab8bb", - "JA4_ro.1": "t00d1616h2_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,_ff01,0033,002d,0005,4469,000d,0010,0023,001b,002b,0000,0012,000a,0017,000b,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_8fc3c02244b2", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_ff01,0033,002d,0005,4469,000d,0010,0023,001b,002b,0000,0012,000a,0017,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 1, @@ -18,10 +18,10 @@ "srcport": "50113", "dstport": "443", "domain": "www.google.com", - "JA4.1": "t00d1616h2_06835249484a_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,802_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_572e68ba0241_16a20564e4a6", - "JA4_ro.1": "t00d1616h2_802,65,66,67,195,199,196,200,393,392,171,172,6,7,,_001b,0017,ff01,0010,000d,002b,0005,0023,0033,0000,0012,000b,000a,4469,002d,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_2331e95fde68", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,0017,ff01,0010,000d,002b,0005,0023,0033,0000,0012,000b,000a,4469,002d,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 2, @@ -30,10 +30,10 @@ "srcport": "50114", "dstport": "443", "domain": "accounts.google.com", - "JA4.1": "t00d1616h2_a4a0f159df49_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,242,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_a70fd968ce15_e559b0da29d0", - "JA4_ro.1": "t00d1616h2_242,65,66,67,195,199,196,200,393,392,171,172,6,7,,_001b,0000,0033,0010,4469,0017,002d,000d,0005,0023,0012,002b,ff01,000b,000a,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_18f69afefd3d", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,0000,0033,0010,4469,0017,002d,000d,0005,0023,0012,002b,ff01,000b,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 3, @@ -42,10 +42,10 @@ "srcport": "50115", "dstport": "443", "domain": "www.googleapis.com", - "JA4.1": "t00d1616h2_7ea02c1142d5_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,70_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8b75d945926f_0557d6d97bf7", - "JA4_ro.1": "t00d1616h2_70,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0005,0000,ff01,0010,4469,001b,002d,002b,0023,000d,0012,000b,0033,000a,0017,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_c8388c21e187", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0005,0000,ff01,0010,4469,001b,002d,002b,0023,000d,0012,000b,0033,000a,0017,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 4, @@ -54,10 +54,10 @@ "srcport": "50116", "dstport": "443", "domain": "lastpass.com", - "JA4.1": "t00d1616h2_4057d54ba945_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,906_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_faec7b756048_c528162cda70", - "JA4_ro.1": "t00d1616h2_906,65,66,67,195,199,196,200,393,392,171,172,6,7,,_ff01,0005,002b,001b,000a,0033,000b,000d,0000,002d,0023,0012,0017,0010,4469,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_3af4d4b9d2d4", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_ff01,0005,002b,001b,000a,0033,000b,000d,0000,002d,0023,0012,0017,0010,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 5, @@ -66,10 +66,10 @@ "srcport": "50122", "dstport": "443", "domain": "lp-push-server-452.lastpass.com", - "JA4.1": "t00d1616h1_73d9d18e4e10_bed3546ee6f4", - "JA4_r.1": "t00d1616h1_,,018,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h1_828fc7e24cd3_89403d34d704", - "JA4_ro.1": "t00d1616h1_018,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000d,0033,0000,ff01,002b,0023,002d,0005,0012,000b,0017,4469,0010,001b,000a,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h1_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h1_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h1_acb858a92679_5eba26eeae83", + "JA4_ro.1": "t13d1516h1_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,0033,0000,ff01,002b,0023,002d,0005,0012,000b,0017,4469,0010,001b,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 6, @@ -78,10 +78,10 @@ "srcport": "50123", "dstport": "5228", "domain": "mtalk.google.com", - "JA4.1": "t00d161400_4109672baa2e_81116c3a4ed4", - "JA4_r.1": "t00d161400_,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d161400_0200e8047a78_f23aaf66726d", - "JA4_ro.1": "t00d161400_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,002b,001b,0000,0012,002d,000d,000a,0005,0023,0017,ff01,000b,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d151400_8daaf6152771_de4a06bb82e3", + "JA4_r.1": "t13d151400_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d151400_acb858a92679_2f4561be1d1f", + "JA4_ro.1": "t13d151400_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,002b,001b,0000,0012,002d,000d,000a,0005,0023,0017,ff01,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 7, @@ -90,10 +90,10 @@ "srcport": "50126", "dstport": "443", "domain": "www.gstatic.com", - "JA4.1": "t00d1616h2_7ea02c1142d5_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,70_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8b75d945926f_e670d63b8984", - "JA4_ro.1": "t00d1616h2_70,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0005,000b,ff01,0033,0017,001b,000a,4469,002b,0012,002d,0010,0023,000d,0000,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_73544b4297c0", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0005,000b,ff01,0033,0017,001b,000a,4469,002b,0012,002d,0010,0023,000d,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 8, @@ -102,10 +102,10 @@ "srcport": "50127", "dstport": "443", "domain": "ogs.google.com", - "JA4.1": "t00d1616h2_3d6d7dc826de_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_4f3397ca584e_69b3a448b66d", - "JA4_ro.1": "t00d1616h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_001b,000d,ff01,000b,002d,4469,0010,0017,002b,0012,0033,000a,0005,0000,0023,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_1314decb33ff", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,000d,ff01,000b,002d,4469,0010,0017,002b,0012,0033,000a,0005,0000,0023,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 9, @@ -114,10 +114,10 @@ "srcport": "50128", "dstport": "443", "domain": "aa.google.com", - "JA4.1": "t00d1616h2_4124bb9c93d9_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,026,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_9a2f5ecdd7aa_66406454524c", - "JA4_ro.1": "t00d1616h2_026,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0023,002d,0033,0010,001b,002b,0005,000a,000d,ff01,0000,0012,0017,4469,000b,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_330ce4f319a8", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,002d,0033,0010,001b,002b,0005,000a,000d,ff01,0000,0012,0017,4469,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 10, @@ -126,10 +126,10 @@ "srcport": "50130", "dstport": "443", "domain": "safebrowsing.googleapis.com", - "JA4.1": "t00d1616h2_4057d54ba945_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,906_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_faec7b756048_eb0606475d5b", - "JA4_ro.1": "t00d1616h2_906,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0010,4469,000d,0000,0017,0033,002b,0012,ff01,0023,002d,000b,001b,0005,000a,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_b16532485edd", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,4469,000d,0000,0017,0033,002b,0012,ff01,0023,002d,000b,001b,0005,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 11, @@ -138,10 +138,10 @@ "srcport": "50131", "dstport": "443", "domain": "www.facebook.com", - "JA4.1": "t00d1616h2_a4a0f159df49_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,242,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_a70fd968ce15_a5b11a3e561b", - "JA4_ro.1": "t00d1616h2_242,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,4469,0017,002d,000a,000b,ff01,000d,0023,002b,001b,0005,0000,0010,0012,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_427cac041d07", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,4469,0017,002d,000a,000b,ff01,000d,0023,002b,001b,0005,0000,0010,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 12, @@ -150,10 +150,10 @@ "srcport": "50134", "dstport": "443", "domain": "static.xx.fbcdn.net", - "JA4.1": "t00d1616h2_c4e216e269f4_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,354,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_00d8772d9166_9130eaf0760a", - "JA4_ro.1": "t00d1616h2_354,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000d,ff01,0012,002d,001b,000a,0000,0017,0023,0033,0005,002b,0010,000b,4469,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_538a2f938823", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,ff01,0012,002d,001b,000a,0000,0017,0023,0033,0005,002b,0010,000b,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 13, @@ -162,10 +162,10 @@ "srcport": "50132", "dstport": "443", "domain": "static.xx.fbcdn.net", - "JA4.1": "t00d1616h2_7ea02c1142d5_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,70_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8b75d945926f_fd81d2c25fc3", - "JA4_ro.1": "t00d1616h2_70,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,0010,000d,0017,4469,0000,001b,0023,0012,0005,000a,000b,ff01,002d,002b,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_686a0be4bd30", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,0010,000d,0017,4469,0000,001b,0023,0012,0005,000a,000b,ff01,002d,002b,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 14, @@ -174,10 +174,10 @@ "srcport": "50135", "dstport": "443", "domain": "static.xx.fbcdn.net", - "JA4.1": "t00d1616h2_3d6d7dc826de_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_4f3397ca584e_906cedfb752f", - "JA4_ro.1": "t00d1616h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_001b,0023,000b,0017,0000,002d,002b,0033,000d,0005,0010,4469,ff01,000a,0012,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_b7e224026524", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,0023,000b,0017,0000,002d,002b,0033,000d,0005,0010,4469,ff01,000a,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 15, @@ -186,10 +186,10 @@ "srcport": "50133", "dstport": "443", "domain": "static.xx.fbcdn.net", - "JA4.1": "t00d1616h2_4109672baa2e_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0200e8047a78_72b3a495f80c", - "JA4_ro.1": "t00d1616h2_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000a,0033,0000,000b,4469,0005,000d,0017,002d,002b,ff01,001b,0023,0010,0012,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_2861a6985939", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000a,0033,0000,000b,4469,0005,000d,0017,002d,002b,ff01,001b,0023,0010,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 16, @@ -198,10 +198,10 @@ "srcport": "50136", "dstport": "443", "domain": "static.xx.fbcdn.net", - "JA4.1": "t00d1616h2_1232493564c0_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,794_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_390f8e2ebadd_670c37f08900", - "JA4_ro.1": "t00d1616h2_794,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002d,0010,000a,002b,4469,0000,0033,0017,001b,0023,000d,0012,ff01,0005,000b,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_7889df4981c5", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,0010,000a,002b,4469,0000,0033,0017,001b,0023,000d,0012,ff01,0005,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 17, @@ -210,10 +210,10 @@ "srcport": "50137", "dstport": "443", "domain": "static.xx.fbcdn.net", - "JA4.1": "t00d1616h2_3d6d7dc826de_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_4f3397ca584e_5738aa05c719", - "JA4_ro.1": "t00d1616h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0023,0005,000b,4469,0017,0012,ff01,000d,0010,001b,000a,0033,002b,002d,0000,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_8173fc330948", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,0005,000b,4469,0017,0012,ff01,000d,0010,001b,000a,0033,002b,002d,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 18, @@ -222,10 +222,10 @@ "srcport": "50139", "dstport": "443", "domain": "scontent-iad3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_9d59fcccb793_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,578,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0e3e4812791b_14d2c97ac0d7", - "JA4_ro.1": "t00d1616h2_578,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0017,ff01,000a,002b,001b,4469,000b,0010,0023,0033,0005,000d,002d,0012,0000,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_2af320308976", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,ff01,000a,002b,001b,4469,000b,0010,0023,0033,0005,000d,002d,0012,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 19, @@ -234,10 +234,10 @@ "srcport": "50140", "dstport": "443", "domain": "gateway.facebook.com", - "JA4.1": "t00d1616h1_4109672baa2e_bed3546ee6f4", - "JA4_r.1": "t00d1616h1_,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h1_0200e8047a78_f7150114d838", - "JA4_ro.1": "t00d1616h1_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0012,4469,0010,000a,002b,0033,001b,0017,0023,000b,0000,0005,ff01,002d,000d,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h1_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h1_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h1_acb858a92679_4d217f5c60c0", + "JA4_ro.1": "t13d1516h1_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,4469,0010,000a,002b,0033,001b,0017,0023,000b,0000,0005,ff01,002d,000d,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 20, @@ -246,10 +246,10 @@ "srcport": "50142", "dstport": "443", "domain": "scontent-lga3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_1232493564c0_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,794_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_390f8e2ebadd_d13963cf6322", - "JA4_ro.1": "t00d1616h2_794,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002b,0017,002d,0005,4469,000d,0012,0023,000a,001b,ff01,0033,000b,0000,0010,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_0ba12093491f", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002b,0017,002d,0005,4469,000d,0012,0023,000a,001b,ff01,0033,000b,0000,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 21, @@ -258,10 +258,10 @@ "srcport": "50141", "dstport": "443", "domain": "scontent-mia3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_4057d54ba945_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,906_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_faec7b756048_c6caae0df2a3", - "JA4_ro.1": "t00d1616h2_906,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0000,002b,000d,0010,002d,001b,000b,0023,ff01,0017,0012,0033,0005,4469,000a,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_55d7fff9dff7", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0000,002b,000d,0010,002d,001b,000b,0023,ff01,0017,0012,0033,0005,4469,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 22, @@ -270,10 +270,10 @@ "srcport": "50143", "dstport": "443", "domain": "scontent.fewr1-6.fna.fbcdn.net", - "JA4.1": "t00d1616h2_c4e216e269f4_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,354,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_00d8772d9166_9d334f2534f6", - "JA4_ro.1": "t00d1616h2_354,65,66,67,195,199,196,200,393,392,171,172,6,7,,_4469,000b,0033,002b,ff01,0000,0017,0023,001b,002d,000a,0010,0012,000d,0005,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_e089cde5ad66", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_4469,000b,0033,002b,ff01,0000,0017,0023,001b,002d,000a,0010,0012,000d,0005,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 23, @@ -282,10 +282,10 @@ "srcport": "50145", "dstport": "443", "domain": "video-iad3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_c4e216e269f4_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,354,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_00d8772d9166_9d48320b88ee", - "JA4_ro.1": "t00d1616h2_354,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002d,0010,0012,002b,0005,001b,0017,000d,4469,0033,0000,000b,ff01,0023,000a,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_c1d170c535e5", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,0010,0012,002b,0005,001b,0017,000d,4469,0033,0000,000b,ff01,0023,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 24, @@ -294,10 +294,10 @@ "srcport": "50146", "dstport": "443", "domain": "video-iad3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_7ea02c1142d5_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,70_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8b75d945926f_2492b4cc2c88", - "JA4_ro.1": "t00d1616h2_70,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0012,000d,0023,001b,0005,002d,000b,0017,ff01,002b,4469,0033,000a,0000,0010,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_9be69fbcfb74", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,000d,0023,001b,0005,002d,000b,0017,ff01,002b,4469,0033,000a,0000,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 25, @@ -306,10 +306,10 @@ "srcport": "50144", "dstport": "443", "domain": "video-iad3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_c4e216e269f4_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,354,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_00d8772d9166_ceefb737daed", - "JA4_ro.1": "t00d1616h2_354,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0017,0010,0000,0033,001b,0012,000d,0023,0005,ff01,000b,002d,000a,002b,4469,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_8d31aaae1631", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,0010,0000,0033,001b,0012,000d,0023,0005,ff01,000b,002d,000a,002b,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 26, @@ -318,10 +318,10 @@ "srcport": "50147", "dstport": "443", "domain": "video-iad3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_4124bb9c93d9_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,026,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_9a2f5ecdd7aa_39017488afb6", - "JA4_ro.1": "t00d1616h2_026,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0010,0000,000b,000a,0023,0012,002b,002d,000d,ff01,0017,4469,0005,0033,001b,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_07af8028e23e", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,0000,000b,000a,0023,0012,002b,002d,000d,ff01,0017,4469,0005,0033,001b,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 27, @@ -330,10 +330,10 @@ "srcport": "50148", "dstport": "443", "domain": "video-iad3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_4124bb9c93d9_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,026,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_9a2f5ecdd7aa_b98c92ff41fe", - "JA4_ro.1": "t00d1616h2_026,65,66,67,195,199,196,200,393,392,171,172,6,7,,_4469,000d,0017,0023,002b,0005,0010,002d,001b,0000,0012,000b,000a,0033,ff01,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_3ec2c7066647", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_4469,000d,0017,0023,002b,0005,0010,002d,001b,0000,0012,000b,000a,0033,ff01,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 28, @@ -342,10 +342,10 @@ "srcport": "50149", "dstport": "443", "domain": "video-iad3-2.xx.fbcdn.net", - "JA4.1": "t00d1616h2_267b3aae5f67_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,130,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8282cc1561ee_bcbb1ceeb308", - "JA4_ro.1": "t00d1616h2_130,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000a,ff01,0010,002b,000b,0000,4469,0017,0012,000d,002d,0033,0023,001b,0005,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_a9cc25f93fb0", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000a,ff01,0010,002b,000b,0000,4469,0017,0012,000d,002d,0033,0023,001b,0005,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 29, @@ -354,10 +354,10 @@ "srcport": "50151", "dstport": "443", "domain": "content-autofill.googleapis.com", - "JA4.1": "t00d1616h2_c4e216e269f4_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,354,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_00d8772d9166_49eedbd2eea8", - "JA4_ro.1": "t00d1616h2_354,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0023,0010,0000,0005,0033,ff01,4469,002d,0012,000d,001b,0017,000a,002b,000b,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_5cfab8711ae5", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,0010,0000,0005,0033,ff01,4469,002d,0012,000d,001b,0017,000a,002b,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 30, @@ -366,10 +366,10 @@ "srcport": "50152", "dstport": "443", "domain": "edge-chat.facebook.com", - "JA4.1": "t00d1616h1_4124bb9c93d9_bed3546ee6f4", - "JA4_r.1": "t00d1616h1_,,026,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h1_9a2f5ecdd7aa_7a52b4f1d573", - "JA4_ro.1": "t00d1616h1_026,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002d,0000,0023,000d,0017,0005,0010,0012,ff01,002b,001b,000b,000a,0033,4469,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h1_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h1_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h1_acb858a92679_a5ce045fadd3", + "JA4_ro.1": "t13d1516h1_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,0000,0023,000d,0017,0005,0010,0012,ff01,002b,001b,000b,000a,0033,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 31, @@ -378,10 +378,10 @@ "srcport": "50153", "dstport": "443", "domain": "edge-chat.facebook.com", - "JA4.1": "t00d1617h1_06835249484a_a5cb12758aa4", - "JA4_r.1": "t00d1617h1_,,171,172,195,196,199,200,392,393,6,65,66,67,7,802_0005,000a,000b,000d,0012,0015,0017,001b,0023,0029,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1617h1_572e68ba0241_c1502c9f74cb", - "JA4_ro.1": "t00d1617h1_802,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0000,0017,0005,002b,0012,0023,000a,0033,0010,002d,001b,4469,000b,000d,ff01,0015,0029_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1517h1_8daaf6152771_6cdcb247c39b", + "JA4_r.1": "t13d1517h1_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,0029,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1517h1_acb858a92679_98b2855b1dea", + "JA4_ro.1": "t13d1517h1_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0000,0017,0005,002b,0012,0023,000a,0033,0010,002d,001b,4469,000b,000d,ff01,0015,0029_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 32, @@ -390,10 +390,10 @@ "srcport": "50155", "dstport": "443", "domain": "www.microsoft.com", - "JA4.1": "t00d1616h2_92d14b0b55fe_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,82_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_d4f7c34455ff_8124b0d5bee2", - "JA4_ro.1": "t00d1616h2_82,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,0005,000b,0000,001b,0023,002d,000d,ff01,4469,002b,0017,0010,0012,000a,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_4aa408e2c085", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,0005,000b,0000,001b,0023,002d,000d,ff01,4469,002b,0017,0010,0012,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 33, @@ -402,10 +402,10 @@ "srcport": "50157", "dstport": "443", "domain": "statics-marketingsites-eus-ms-com.akamaized.net", - "JA4.1": "t00d1616h2_6307a8b4e18c_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,466,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_09a40e5600a4_15ef7e1f7aa9", - "JA4_ro.1": "t00d1616h2_466,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,ff01,002b,0000,4469,001b,000b,0012,0005,000d,0017,002d,0010,000a,0023,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_687a3a2ce3c4", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,ff01,002b,0000,4469,001b,000b,0012,0005,000d,0017,002d,0010,000a,0023,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 34, @@ -414,10 +414,10 @@ "srcport": "50158", "dstport": "443", "domain": "img-prod-cms-rt-microsoft-com.akamaized.net", - "JA4.1": "t00d1616h2_9d59fcccb793_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,578,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0e3e4812791b_1e75d5233100", - "JA4_ro.1": "t00d1616h2_578,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0010,0012,001b,000b,002d,0017,002b,0005,0023,000a,4469,000d,ff01,0033,0000,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_397d290f0301", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,0012,001b,000b,002d,0017,002b,0005,0023,000a,4469,000d,ff01,0033,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 35, @@ -426,10 +426,10 @@ "srcport": "50160", "dstport": "443", "domain": "cdn-dynmedia-1.microsoft.com", - "JA4.1": "t00d1616h2_3d6d7dc826de_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_4f3397ca584e_2da15b9b255a", - "JA4_ro.1": "t00d1616h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0023,000b,0005,0000,000d,ff01,4469,0012,0017,002b,001b,002d,000a,0033,0010,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_da9349461c3b", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,000b,0005,0000,000d,ff01,4469,0012,0017,002b,001b,002d,000a,0033,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 36, @@ -438,10 +438,10 @@ "srcport": "50162", "dstport": "443", "domain": "cdn-dynmedia-1.microsoft.com", - "JA4.1": "t00d1616h2_6307a8b4e18c_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,466,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_09a40e5600a4_a253dbabe7a2", - "JA4_ro.1": "t00d1616h2_466,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0012,0023,000a,000b,0000,0005,ff01,4469,002b,0017,001b,002d,000d,0033,0010,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_497901d2ace7", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,0023,000a,000b,0000,0005,ff01,4469,002b,0017,001b,002d,000d,0033,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 37, @@ -450,10 +450,10 @@ "srcport": "50161", "dstport": "443", "domain": "cdn-dynmedia-1.microsoft.com", - "JA4.1": "t00d1616h2_92d14b0b55fe_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,82_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_d4f7c34455ff_1388c893a486", - "JA4_ro.1": "t00d1616h2_82,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000a,0012,002b,ff01,0000,0017,000d,000b,002d,001b,4469,0010,0033,0023,0005,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_81dcec84e300", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000a,0012,002b,ff01,0000,0017,000d,000b,002d,001b,4469,0010,0033,0023,0005,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 38, @@ -462,14 +462,14 @@ "srcport": "50159", "dstport": "443", "domain": "mem.gfx.ms", - "JA4.1": "t00d1616h2_3d6d7dc826de_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_4f3397ca584e_69a5b7ced5c7", - "JA4_ro.1": "t00d1616h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0005,001b,0033,002d,4469,000a,000d,0012,ff01,000b,0023,002b,0000,0017,0010,0015_27,52,25,83,53,81,54,37", - "JA4.2": "t00d1615h2_3d6d7dc826de_3020f1a04d4a", - "JA4_r.2": "t00d1615h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.2": "t00d1615h2_4f3397ca584e_5fa93c695689", - "JA4_ro.2": "t00d1615h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0005,001b,0033,002d,4469,000a,000d,0012,ff01,000b,0023,002b,0000,0017,0010_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_0e6a3d869d9d", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0005,001b,0033,002d,4469,000a,000d,0012,ff01,000b,0023,002b,0000,0017,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", + "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.2": "t13d1515h2_acb858a92679_b90d13bf6f98", + "JA4_ro.2": "t13d1515h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0005,001b,0033,002d,4469,000a,000d,0012,ff01,000b,0023,002b,0000,0017,0010_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 39, @@ -478,10 +478,10 @@ "srcport": "50163", "dstport": "443", "domain": "via.placeholder.com", - "JA4.1": "t00d1616h2_e54801c2e950_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,138,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_229fbafadc6d_a1f5eff5fd8b", - "JA4_ro.1": "t00d1616h2_138,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000d,002b,4469,0012,0023,002d,0000,000b,0033,000a,0005,0017,ff01,001b,0010,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_8b5fc429a01a", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,002b,4469,0012,0023,002d,0000,000b,0033,000a,0005,0017,ff01,001b,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 40, @@ -490,10 +490,10 @@ "srcport": "50164", "dstport": "443", "domain": "wcpstatic.microsoft.com", - "JA4.1": "t00d1616h2_06835249484a_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,802_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_572e68ba0241_798d2f271f6f", - "JA4_ro.1": "t00d1616h2_802,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000b,0005,0000,0017,000a,0033,002b,0012,000d,ff01,0010,0023,002d,001b,4469,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_942bc1763a61", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000b,0005,0000,0017,000a,0033,002b,0012,000d,ff01,0010,0023,002d,001b,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 41, @@ -502,14 +502,14 @@ "srcport": "50165", "dstport": "443", "domain": "js.monitor.azure.com", - "JA4.1": "t00d1616h2_3d6d7dc826de_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_4f3397ca584e_5b66e173035f", - "JA4_ro.1": "t00d1616h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0012,000d,001b,002b,0000,4469,0023,ff01,0033,000a,0017,002d,000b,0010,0005,0015_27,52,25,83,53,81,54,37", - "JA4.2": "t00d1615h2_3d6d7dc826de_3020f1a04d4a", - "JA4_r.2": "t00d1615h2_,,171,172,195,196,199,200,250,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.2": "t00d1615h2_4f3397ca584e_ec4845452946", - "JA4_ro.2": "t00d1615h2_250,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0012,000d,001b,002b,0000,4469,0023,ff01,0033,000a,0017,002d,000b,0010,0005_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_5ec2817d7b86", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,000d,001b,002b,0000,4469,0023,ff01,0033,000a,0017,002d,000b,0010,0005,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", + "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.2": "t13d1515h2_acb858a92679_b0ba2f989aea", + "JA4_ro.2": "t13d1515h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,000d,001b,002b,0000,4469,0023,ff01,0033,000a,0017,002d,000b,0010,0005_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 42, @@ -518,14 +518,14 @@ "srcport": "50166", "dstport": "443", "domain": "mem.gfx.ms", - "JA4.1": "t00d1616h2_e54801c2e950_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,138,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_229fbafadc6d_5c57d7d34ca4", - "JA4_ro.1": "t00d1616h2_138,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0017,001b,000b,0012,0010,002b,ff01,0033,0005,0000,0023,000a,002d,4469,000d,0015_27,52,25,83,53,81,54,37", - "JA4.2": "t00d1615h2_e54801c2e950_3020f1a04d4a", - "JA4_r.2": "t00d1615h2_,,138,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.2": "t00d1615h2_229fbafadc6d_910416100b12", - "JA4_ro.2": "t00d1615h2_138,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0017,001b,000b,0012,0010,002b,ff01,0033,0005,0000,0023,000a,002d,4469,000d_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_fbf4c64f425f", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,001b,000b,0012,0010,002b,ff01,0033,0005,0000,0023,000a,002d,4469,000d,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", + "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.2": "t13d1515h2_acb858a92679_c95bfa41ab5d", + "JA4_ro.2": "t13d1515h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,001b,000b,0012,0010,002b,ff01,0033,0005,0000,0023,000a,002d,4469,000d_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 43, @@ -534,10 +534,10 @@ "srcport": "50167", "dstport": "443", "domain": "login.live.com", - "JA4.1": "t00d1616h2_73d9d18e4e10_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,018,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_828fc7e24cd3_8af5184c75f5", - "JA4_ro.1": "t00d1616h2_018,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000b,0033,0000,ff01,000a,002d,0023,0012,000d,4469,0017,002b,001b,0005,0010,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_b5e0789e757f", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000b,0033,0000,ff01,000a,002d,0023,0012,000d,4469,0017,002b,001b,0005,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 44, @@ -546,14 +546,14 @@ "srcport": "50168", "dstport": "443", "domain": "logincdn.msauth.net", - "JA4.1": "t00d1616h2_92d14b0b55fe_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,82_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_d4f7c34455ff_f7f9b3ff40de", - "JA4_ro.1": "t00d1616h2_82,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002b,001b,000a,0033,0012,0005,000d,0000,002d,0017,0010,ff01,4469,000b,0023,0015_27,52,25,83,53,81,54,37", - "JA4.2": "t00d1615h2_92d14b0b55fe_3020f1a04d4a", - "JA4_r.2": "t00d1615h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,82_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.2": "t00d1615h2_d4f7c34455ff_cef006b50a55", - "JA4_ro.2": "t00d1615h2_82,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002b,001b,000a,0033,0012,0005,000d,0000,002d,0017,0010,ff01,4469,000b,0023_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_f044a1abfa22", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002b,001b,000a,0033,0012,0005,000d,0000,002d,0017,0010,ff01,4469,000b,0023,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", + "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.2": "t13d1515h2_acb858a92679_253bca5d0b80", + "JA4_ro.2": "t13d1515h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002b,001b,000a,0033,0012,0005,000d,0000,002d,0017,0010,ff01,4469,000b,0023_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 45, @@ -562,14 +562,14 @@ "srcport": "50169", "dstport": "443", "domain": "mem.gfx.ms", - "JA4.1": "t00d1616h2_6307a8b4e18c_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,466,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_09a40e5600a4_3cfec2a9591f", - "JA4_ro.1": "t00d1616h2_466,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0017,ff01,0023,002b,002d,000d,0005,001b,000a,4469,0010,0000,0033,000b,0012,0015_27,52,25,83,53,81,54,37", - "JA4.2": "t00d1615h2_6307a8b4e18c_3020f1a04d4a", - "JA4_r.2": "t00d1615h2_,,171,172,195,196,199,200,392,393,466,6,65,66,67,7_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.2": "t00d1615h2_09a40e5600a4_b65077d6af85", - "JA4_ro.2": "t00d1615h2_466,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0017,ff01,0023,002b,002d,000d,0005,001b,000a,4469,0010,0000,0033,000b,0012_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_3395779fe3fb", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,ff01,0023,002b,002d,000d,0005,001b,000a,4469,0010,0000,0033,000b,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", + "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.2": "t13d1515h2_acb858a92679_1fea980e9d76", + "JA4_ro.2": "t13d1515h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,ff01,0023,002b,002d,000d,0005,001b,000a,4469,0010,0000,0033,000b,0012_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 46, @@ -578,10 +578,10 @@ "srcport": "50170", "dstport": "443", "domain": "target.microsoft.com", - "JA4.1": "t00d1616h2_c4e216e269f4_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,354,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_00d8772d9166_610f21c992f2", - "JA4_ro.1": "t00d1616h2_354,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0017,ff01,001b,0023,0000,0033,000a,000b,0005,0010,000d,0012,002d,4469,002b,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_4360d1c81b7c", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,ff01,001b,0023,0000,0033,000a,000b,0005,0010,000d,0012,002d,4469,002b,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 47, @@ -590,10 +590,10 @@ "srcport": "50172", "dstport": "443", "domain": "www.apple.com", - "JA4.1": "t00d1616h2_4109672baa2e_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0200e8047a78_7dacaec9656d", - "JA4_ro.1": "t00d1616h2_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000d,0005,002d,4469,0012,ff01,0023,0017,000a,0000,0033,0010,000b,001b,002b,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_cf768f5c9444", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,0005,002d,4469,0012,ff01,0023,0017,000a,0000,0033,0010,000b,001b,002b,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 48, @@ -602,10 +602,10 @@ "srcport": "50175", "dstport": "443", "domain": "is1-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_e54801c2e950_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,138,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_229fbafadc6d_3ecba0861e51", - "JA4_ro.1": "t00d1616h2_138,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0010,000a,0005,4469,0033,002d,0017,0012,000b,001b,0023,ff01,002b,000d,0000,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_6e8cce17e7d7", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,000a,0005,4469,0033,002d,0017,0012,000b,001b,0023,ff01,002b,000d,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 49, @@ -614,10 +614,10 @@ "srcport": "50174", "dstport": "443", "domain": "is1-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_4057d54ba945_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,906_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_faec7b756048_1595299e0424", - "JA4_ro.1": "t00d1616h2_906,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000a,0000,0033,0023,0017,002d,4469,001b,0010,ff01,000d,0012,002b,0005,000b,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_f825e233d654", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000a,0000,0033,0023,0017,002d,4469,001b,0010,ff01,000d,0012,002b,0005,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 50, @@ -626,10 +626,10 @@ "srcport": "50177", "dstport": "443", "domain": "is2-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_9d59fcccb793_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,578,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0e3e4812791b_f162ffa569aa", - "JA4_ro.1": "t00d1616h2_578,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0023,4469,002b,002d,0000,0005,000a,ff01,001b,0017,0010,0033,000b,0012,000d,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_021f89855834", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,4469,002b,002d,0000,0005,000a,ff01,001b,0017,0010,0033,000b,0012,000d,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 51, @@ -638,10 +638,10 @@ "srcport": "50176", "dstport": "443", "domain": "is2-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_267b3aae5f67_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,130,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8282cc1561ee_6f6e7aeeeaff", - "JA4_ro.1": "t00d1616h2_130,65,66,67,195,199,196,200,393,392,171,172,6,7,,_4469,000a,001b,000b,0000,0023,000d,0017,002b,0033,ff01,002d,0005,0012,0010,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_883fa5a7a13b", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_4469,000a,001b,000b,0000,0023,000d,0017,002b,0033,ff01,002d,0005,0012,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 52, @@ -650,10 +650,10 @@ "srcport": "50178", "dstport": "443", "domain": "is2-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_4109672baa2e_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,690,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0200e8047a78_504535a8f093", - "JA4_ro.1": "t00d1616h2_690,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,0023,0005,001b,0000,002d,0017,4469,000b,000d,0012,ff01,000a,002b,0010,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_dfed22113221", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,0023,0005,001b,0000,002d,0017,4469,000b,000d,0012,ff01,000a,002b,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 53, @@ -662,10 +662,10 @@ "srcport": "50180", "dstport": "443", "domain": "is3-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_73d9d18e4e10_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,018,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_828fc7e24cd3_41b37e45f393", - "JA4_ro.1": "t00d1616h2_018,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0010,0017,0023,0012,0000,002b,002d,000a,000b,ff01,000d,0033,4469,0005,001b,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_d50c88625340", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,0017,0023,0012,0000,002b,002d,000a,000b,ff01,000d,0033,4469,0005,001b,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 54, @@ -674,10 +674,10 @@ "srcport": "50182", "dstport": "443", "domain": "is3-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_7ea02c1142d5_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,70_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8b75d945926f_11ffca9cd0b3", - "JA4_ro.1": "t00d1616h2_70,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0005,0010,000a,000b,002b,000d,001b,002d,4469,0023,0033,0000,ff01,0012,0017,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_26c01394417b", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0005,0010,000a,000b,002b,000d,001b,002d,4469,0023,0033,0000,ff01,0012,0017,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 55, @@ -686,10 +686,10 @@ "srcport": "50181", "dstport": "443", "domain": "is3-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_e54801c2e950_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,138,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_229fbafadc6d_b26e58a385ad", - "JA4_ro.1": "t00d1616h2_138,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0010,0012,002b,000a,000b,ff01,0005,000d,0023,001b,0033,0017,4469,0000,002d,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_0c4877241e3c", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,0012,002b,000a,000b,ff01,0005,000d,0023,001b,0033,0017,4469,0000,002d,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 56, @@ -698,10 +698,10 @@ "srcport": "50179", "dstport": "443", "domain": "is2-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_1232493564c0_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,794_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_390f8e2ebadd_29f6b1a8b311", - "JA4_ro.1": "t00d1616h2_794,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002d,0023,ff01,0000,000b,0017,0033,000a,002b,0005,000d,0012,4469,001b,0010,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_0c637659a2d5", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,0023,ff01,0000,000b,0017,0033,000a,002b,0005,000d,0012,4469,001b,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 57, @@ -710,10 +710,10 @@ "srcport": "50183", "dstport": "443", "domain": "is5-ssl.mzstatic.com", - "JA4.1": "t00d1616h2_6307a8b4e18c_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,466,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_09a40e5600a4_7d5766b8de50", - "JA4_ro.1": "t00d1616h2_466,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,0000,0010,0023,0017,002d,4469,000a,0005,ff01,001b,002b,000b,000d,0012,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_f0c0f532ba7c", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,0000,0010,0023,0017,002d,4469,000a,0005,ff01,001b,002b,000b,000d,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601" }, { "stream": 58, @@ -722,9 +722,9 @@ "srcport": "50184", "dstport": "443", "domain": "content-autofill.googleapis.com", - "JA4.1": "t00d1616h2_267b3aae5f67_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,130,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8282cc1561ee_675811c43dd5", - "JA4_ro.1": "t00d1616h2_130,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0000,0033,000d,0023,000b,ff01,000a,001b,4469,0012,002d,0010,0005,002b,0017,0015_27,52,25,83,53,81,54,37" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_5276cb03a33b", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0000,0033,000d,0023,000b,ff01,000a,001b,4469,0012,002d,0010,0005,002b,0017,0015_0403,0804,0401,0503,0805,0501,0806,0601" } ] \ No newline at end of file diff --git a/python/test/testdata/tls12.pcap.json b/python/test/testdata/tls12.pcap.json index 27d2a2e..5cefdbd 100644 --- a/python/test/testdata/tls12.pcap.json +++ b/python/test/testdata/tls12.pcap.json @@ -6,9 +6,9 @@ "srcport": "36372", "dstport": "443", "domain": "contile.services.mozilla.com", - "JA4.1": "t00d1715h2_bc725f95a748_107db796aee2", - "JA4_r.1": "t00d1715h2_,,161,162,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0015,0017,001c,0022,0023,002b,002d,0033,ff01_27,83,39,52,53,54,25,81,37,5,3", - "JA4_o.1": "t00d1715h2_1410090ed828_d1cf8c39e7fc", - "JA4_ro.1": "t00d1715h2_65,67,66,195,199,393,392,196,200,162,161,171,172,6,7,,_0000,0017,ff01,000a,000b,0023,0010,0005,0022,0033,002b,000d,002d,001c,0015_27,83,39,52,53,54,25,81,37,5,3" + "JA4.1": "t13d1715h2_5b57614c22b0_3d5424432f57", + "JA4_r.1": "t13d1715h2_002f,0035,009c,009d,1301,1302,1303,c009,c00a,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0015,0017,001c,0022,0023,002b,002d,0033,ff01_0403,0503,0603,0804,0805,0806,0401,0501,0601,0203,0201", + "JA4_o.1": "t13d1715h2_5b234860e130_014157ec0da2", + "JA4_ro.1": "t13d1715h2_1301,1303,1302,c02b,c02f,cca9,cca8,c02c,c030,c00a,c009,c013,c014,009c,009d,002f,0035_0000,0017,ff01,000a,000b,0023,0010,0005,0022,0033,002b,000d,002d,001c,0015_0403,0503,0603,0804,0805,0806,0401,0501,0601,0203,0201" } ] \ No newline at end of file diff --git a/python/test/testdata/tls3.pcapng.json b/python/test/testdata/tls3.pcapng.json index df75bdf..9fa573a 100644 --- a/python/test/testdata/tls3.pcapng.json +++ b/python/test/testdata/tls3.pcapng.json @@ -83,11 +83,11 @@ "JA4L-S": "34615_35", "JA4L-C": "86_128", "domain": "darksail.ai", - "JA4.1": "t00d1616h2_267b3aae5f67_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,130,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8282cc1561ee_aad8bc8031e1", - "JA4_ro.1": "t00d1616h2_130,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0023,0033,ff01,000a,0012,0005,0017,4469,0000,001b,000d,002d,000b,002b,0010,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_9948b1e7c6e7", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,0033,ff01,000a,0012,0005,0017,4469,0000,001b,000d,002d,000b,002b,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 8, @@ -111,11 +111,11 @@ "JA4L-S": "36549_35", "JA4L-C": "64_128", "domain": "darksail.ai", - "JA4.1": "t00d1616h2_9d59fcccb793_811abd909fb7", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,578,6,65,66,67,7_0005,000a,000b,000d,0012,0017,001b,0023,0029,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_0e3e4812791b_3ddd440f4dca", - "JA4_ro.1": "t00d1616h2_578,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0033,000a,0005,000d,0012,0000,0010,002b,0023,001b,0017,002d,ff01,4469,000b,0029_27,52,25,83,53,81,54,37", - "JA4S": "t000300_65_0ee26285a86f" + "JA4.1": "t13d1516h2_8daaf6152771_9b887d9acb53", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,0029,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_01fb3542df69", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,000a,0005,000d,0012,0000,0010,002b,0023,001b,0017,002d,ff01,4469,000b,0029_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130300_1301_0ee26285a86f" }, { "stream": 10, @@ -128,11 +128,11 @@ "JA4L-S": "34691_38", "JA4L-C": "78_128", "domain": "darksail.ai", - "JA4.1": "t00d1616h2_3588272722ae_811abd909fb7", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,914_0005,000a,000b,000d,0012,0017,001b,0023,0029,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_81d927908543_b8663ba4b82d", - "JA4_ro.1": "t00d1616h2_914,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002d,000b,ff01,0017,0010,0005,002b,4469,0000,0012,000d,001b,000a,0023,0033,0029_27,52,25,83,53,81,54,37", - "JA4S": "t000300_65_0ee26285a86f" + "JA4.1": "t13d1516h2_8daaf6152771_9b887d9acb53", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,0029,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_cd85e435c726", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,000b,ff01,0017,0010,0005,002b,4469,0000,0012,000d,001b,000a,0023,0033,0029_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130300_1301_0ee26285a86f" }, { "stream": 11, @@ -145,11 +145,11 @@ "JA4L-S": "2442_57", "JA4L-C": "66_128", "domain": "rsms.me", - "JA4.1": "t00d1616h2_7ea02c1142d5_811abd909fb7", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,70_0005,000a,000b,000d,0012,0017,001b,0023,0029,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8b75d945926f_16af819020a4", - "JA4_ro.1": "t00d1616h2_70,65,66,67,195,199,196,200,393,392,171,172,6,7,,_001b,000a,4469,0023,002b,0033,000d,000b,ff01,002d,0000,0017,0005,0010,0012,0029_27,52,25,83,53,81,54,37", - "JA4S": "t000300_65_6bbbaf601ed8" + "JA4.1": "t13d1516h2_8daaf6152771_9b887d9acb53", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,0029,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_02518cc01a32", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,000a,4469,0023,002b,0033,000d,000b,ff01,002d,0000,0017,0005,0010,0012,0029_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130300_1301_6bbbaf601ed8" }, { "stream": 12, @@ -162,11 +162,11 @@ "JA4L-S": "36498_35", "JA4L-C": "360_128", "domain": "darksail.ai", - "JA4.1": "t00d1616h2_4057d54ba945_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,906_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_faec7b756048_56655901e76b", - "JA4_ro.1": "t00d1616h2_906,65,66,67,195,199,196,200,393,392,171,172,6,7,,_002d,000b,ff01,0023,000a,0000,001b,4469,0017,000d,002b,0012,0005,0033,0010,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_117873b7a39c", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,000b,ff01,0023,000a,0000,001b,4469,0017,000d,002b,0012,0005,0033,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 13, @@ -179,11 +179,11 @@ "JA4L-S": "33515_32", "JA4L-C": "71_128", "domain": "darksail.ai", - "JA4.1": "t00d1616h2_e54801c2e950_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,138,171,172,195,196,199,200,392,393,6,65,66,67,7_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_229fbafadc6d_543d524ceca5", - "JA4_ro.1": "t00d1616h2_138,65,66,67,195,199,196,200,393,392,171,172,6,7,,_000d,001b,000b,4469,0023,0005,ff01,002d,0000,0012,0017,000a,0033,002b,0010,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_09de6778cc55", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,001b,000b,4469,0023,0005,ff01,002d,0000,0012,0017,000a,0033,002b,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" }, { "stream": 14, @@ -196,10 +196,10 @@ "JA4L-S": "33738_33", "JA4L-C": "53_128", "domain": "darksail.ai", - "JA4.1": "t00d1616h2_7ea02c1142d5_bed3546ee6f4", - "JA4_r.1": "t00d1616h2_,,171,172,195,196,199,200,392,393,6,65,66,67,7,70_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_27,52,25,83,53,81,54,37", - "JA4_o.1": "t00d1616h2_8b75d945926f_4e8b0e5efbb3", - "JA4_ro.1": "t00d1616h2_70,65,66,67,195,199,196,200,393,392,171,172,6,7,,_0012,001b,0023,0010,000b,0005,002b,0033,ff01,000d,002d,0017,4469,0000,000a,0015_27,52,25,83,53,81,54,37", - "JA4S": "t000200_65_a56c5b993250" + "JA4.1": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4_o.1": "t13d1516h2_acb858a92679_0500216284de", + "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,001b,0023,0010,000b,0005,002b,0033,ff01,000d,002d,0017,4469,0000,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601", + "JA4S": "t130200_1301_a56c5b993250" } ] \ No newline at end of file