diff --git a/python/test/generate-output-files.sh b/python/test/generate-output-files.sh index 61efd3b..0f12dd1 100755 --- a/python/test/generate-output-files.sh +++ b/python/test/generate-output-files.sh @@ -20,5 +20,5 @@ fi for pcap in "${PCAP_FILES[@]}"; do base=$(basename "$pcap") out="$OUT_DIR/${base}.json" - python3 "$JA4_SCRIPT" "$pcap" -J -f "$out" + python3 "$JA4_SCRIPT" "$pcap" -J -r -o -f "$out" done diff --git a/python/test/test_ja4_output.py b/python/test/test_ja4_output.py index 0f7f1a1..98cd407 100644 --- a/python/test/test_ja4_output.py +++ b/python/test/test_ja4_output.py @@ -32,6 +32,8 @@ def test_ja4_output_matches_expected(pcap_file, tmp_path): str(JA4_SCRIPT), str(pcap_file), "-J", + "-r", + "-o", "-f", str(output_file), ], diff --git a/python/test/testdata/CVE-2018-6794.pcap.json b/python/test/testdata/CVE-2018-6794.pcap.json index 5167178..860ffcc 100644 --- a/python/test/testdata/CVE-2018-6794.pcap.json +++ b/python/test/testdata/CVE-2018-6794.pcap.json @@ -5,7 +5,8 @@ "dst": "192.168.235.1", "srcport": "8089", "dstport": "53649", - "JA4H": "ge11nn07ruru_6cd0fb54989b_000000000000_000000000000" + "JA4H": "ge11nn07ruru_6cd0fb54989b_000000000000_000000000000", + "JA4H_ro": "ge11nn07ruru_Host,Connection,User-Agent,Upgrade-Insecure-Requests,Accept,Accept-Encoding,Accept-Language_" }, { "stream": 1, @@ -13,6 +14,7 @@ "dst": "192.168.235.1", "srcport": "8089", "dstport": "53656", - "JA4H": "ge11nr06ruru_cc6ec9a91856_000000000000_000000000000" + "JA4H": "ge11nr06ruru_cc6ec9a91856_000000000000_000000000000", + "JA4H_ro": "ge11nr06ruru_Host,Connection,User-Agent,Accept,Accept-Encoding,Accept-Language_" } ] \ No newline at end of file diff --git a/python/test/testdata/badcurveball.pcap.json b/python/test/testdata/badcurveball.pcap.json index d813855..db190f3 100644 --- a/python/test/testdata/badcurveball.pcap.json +++ b/python/test/testdata/badcurveball.pcap.json @@ -15,6 +15,7 @@ "JA4_o.1": "t13d1615h2_45f31bb0a5cc_b0e5d31d5128", "JA4_ro.1": "t13d1615h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035,000a_0000,0017,ff01,000a,000b,0023,0010,0005,000d,0012,0033,002d,002b,001b,0015_0403,0804,0401,0503,0805,0501,0806,0601,0201", "JA4S": "t1205h1_c02b_845f7282a956", + "JA4S_r": "t1205h1_c02b_0000,ff01,000b,0023,0010", "JA4X.1": "2e9214a636bc_a373a9f83c6b_0e17604154c5", "JA4X.2": "2e9214a636bc_2e9214a636bc_795797892f9c" } diff --git a/python/test/testdata/browsers-x509.pcapng.json b/python/test/testdata/browsers-x509.pcapng.json index 3b56127..db0e0af 100644 --- a/python/test/testdata/browsers-x509.pcapng.json +++ b/python/test/testdata/browsers-x509.pcapng.json @@ -33,6 +33,7 @@ "JA4_o.1": "t13d1516h2_acb858a92679_2da480b6a2c8", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002b,4469,000b,0017,000d,0000,001b,0005,0033,ff01,0010,000a,002d,0012,0023,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t1207h2_c02b_cf25e267ce22", + "JA4S_r": "t1207h2_c02b_ff01,0000,000b,0023,0005,0010,0017", "JA4X.1": "7d5dbb3783b4_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_7d5dbb3783b4_44440d41940c" }, @@ -52,6 +53,7 @@ "JA4_o.1": "t13d1516h2_acb858a92679_c4528f9c0199", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0000,0033,0010,0017,ff01,0012,002b,000d,000a,002d,0005,0023,000b,4469,001b,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t1205h2_c02f_845f7282a956", + "JA4S_r": "t1205h2_c02f_0000,ff01,000b,0023,0010", "JA4X.1": "2bab15409345_2e9214a636bc_b891c0ad6f32", "JA4X.2": "2bab15409345_2bab15409345_2367ce7fbc5b", "JA4X.3": "2bab15409345_2bab15409345_2030e37f3421" diff --git a/python/test/testdata/chrome-cloudflare-quic-with-secrets.pcapng.json b/python/test/testdata/chrome-cloudflare-quic-with-secrets.pcapng.json index e76bca9..b2985e2 100644 --- a/python/test/testdata/chrome-cloudflare-quic-with-secrets.pcapng.json +++ b/python/test/testdata/chrome-cloudflare-quic-with-secrets.pcapng.json @@ -15,6 +15,7 @@ "JA4_o.1": "t13d1516h2_acb858a92679_2d79a7d73c2f", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0000,0017,ff01,000a,000b,0023,0010,0005,000d,0012,0033,002d,002b,001b,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_44440d41940c" }, @@ -24,7 +25,8 @@ "dst": "2606:4700:10::6816:826", "srcport": "57098", "dstport": "443", - "JA4H": "ge20nn12enus_60f823d07c94_000000000000_000000000000" + "JA4H": "ge20nn12enus_60f823d07c94_000000000000_000000000000", + "JA4H_ro": "ge20nn12enus_sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,upgrade-insecure-requests,user-agent,accept,sec-fetch-site,sec-fetch-mode,sec-fetch-user,sec-fetch-dest,accept-encoding,accept-language_" }, { "stream": 0, diff --git a/python/test/testdata/http1-with-cookies.pcapng.json b/python/test/testdata/http1-with-cookies.pcapng.json index 0b51a7e..67cd81d 100644 --- a/python/test/testdata/http1-with-cookies.pcapng.json +++ b/python/test/testdata/http1-with-cookies.pcapng.json @@ -5,7 +5,8 @@ "dst": "127.0.0.1", "srcport": "61256", "dstport": "8000", - "JA4H": "ge11cr04da00_8ddaef5d77af_280f366eaa04_c2fb0fe53442" + "JA4H": "ge11cr04da00_8ddaef5d77af_280f366eaa04_c2fb0fe53442", + "JA4H_ro": "ge11cr04da00_Host,User-Agent,Accept,Accept-Language_yummy_cookie,tasty_cookie_yummy_cookie=choco,tasty_cookie=strawberry" }, { "stream": 0, diff --git a/python/test/testdata/http1.pcapng.json b/python/test/testdata/http1.pcapng.json index 591125c..bf2cce1 100644 --- a/python/test/testdata/http1.pcapng.json +++ b/python/test/testdata/http1.pcapng.json @@ -5,7 +5,8 @@ "dst": "192.168.1.1", "srcport": "48456", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 1, @@ -13,7 +14,8 @@ "dst": "192.168.1.1", "srcport": "45042", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 2, @@ -21,7 +23,8 @@ "dst": "192.168.1.1", "srcport": "48458", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 3, @@ -29,7 +32,8 @@ "dst": "192.168.1.1", "srcport": "45044", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 4, @@ -37,7 +41,8 @@ "dst": "142.251.16.94", "srcport": "56404", "dstport": "80", - "JA4H": "he11nn05enus_6f8992deff94_000000000000_000000000000" + "JA4H": "he11nn05enus_6f8992deff94_000000000000_000000000000", + "JA4H_ro": "he11nn05enus_Host,Connection,User-Agent,Accept-Encoding,Accept-Language_" }, { "stream": 5, @@ -45,7 +50,8 @@ "dst": "192.168.1.1", "srcport": "48460", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 6, @@ -53,7 +59,8 @@ "dst": "192.168.1.1", "srcport": "45046", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 7, @@ -61,7 +68,8 @@ "dst": "192.168.1.1", "srcport": "48462", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 8, @@ -69,7 +77,8 @@ "dst": "192.168.1.1", "srcport": "45048", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 9, @@ -77,7 +86,8 @@ "dst": "192.168.1.1", "srcport": "48464", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 10, @@ -85,7 +95,8 @@ "dst": "192.168.1.1", "srcport": "45050", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 11, @@ -93,7 +104,8 @@ "dst": "192.168.1.1", "srcport": "48466", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 12, @@ -101,7 +113,8 @@ "dst": "192.168.1.1", "srcport": "48468", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 13, @@ -109,7 +122,8 @@ "dst": "192.168.1.1", "srcport": "45052", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 14, @@ -117,7 +131,8 @@ "dst": "192.168.1.1", "srcport": "48470", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 15, @@ -125,7 +140,8 @@ "dst": "192.168.1.1", "srcport": "45054", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 16, @@ -133,7 +149,8 @@ "dst": "192.168.1.1", "srcport": "48472", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 4, @@ -141,7 +158,8 @@ "dst": "192.168.1.147", "srcport": "80", "dstport": "56404", - "JA4H": "he11nn05enus_6f8992deff94_000000000000_000000000000" + "JA4H": "he11nn05enus_6f8992deff94_000000000000_000000000000", + "JA4H_ro": "he11nn05enus_Host,Connection,User-Agent,Accept-Encoding,Accept-Language_" }, { "stream": 18, @@ -149,7 +167,8 @@ "dst": "192.168.1.1", "srcport": "48476", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 19, @@ -157,7 +176,8 @@ "dst": "192.168.1.1", "srcport": "45056", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 20, @@ -165,7 +185,8 @@ "dst": "192.168.1.1", "srcport": "48478", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 21, @@ -173,7 +194,8 @@ "dst": "192.168.1.1", "srcport": "48480", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 22, @@ -181,7 +203,8 @@ "dst": "52.85.151.11", "srcport": "38660", "dstport": "80", - "JA4H": "ge11nn040000_ad0fd3707af2_000000000000_000000000000" + "JA4H": "ge11nn040000_ad0fd3707af2_000000000000_000000000000", + "JA4H_ro": "ge11nn040000_Host,User-Agent,Accept,Range_" }, { "stream": 23, @@ -189,7 +212,8 @@ "dst": "142.251.167.94", "srcport": "41355", "dstport": "80", - "JA4H": "ge11nn040000_4f6f4aad0c1e_000000000000_000000000000" + "JA4H": "ge11nn040000_4f6f4aad0c1e_000000000000_000000000000", + "JA4H_ro": "ge11nn040000_User-Agent,Host,Connection,Accept-Encoding_" }, { "stream": 24, @@ -197,7 +221,8 @@ "dst": "104.86.99.193", "srcport": "39698", "dstport": "80", - "JA4H": "he11nn040000_4f6f4aad0c1e_000000000000_000000000000" + "JA4H": "he11nn040000_4f6f4aad0c1e_000000000000_000000000000", + "JA4H_ro": "he11nn040000_User-Agent,Host,Connection,Accept-Encoding_" }, { "stream": 25, @@ -205,7 +230,8 @@ "dst": "192.168.1.1", "srcport": "44238", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 26, @@ -213,7 +239,8 @@ "dst": "192.168.1.1", "srcport": "44239", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 27, @@ -221,7 +248,8 @@ "dst": "192.168.1.1", "srcport": "44240", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 28, @@ -229,7 +257,8 @@ "dst": "192.168.1.1", "srcport": "44241", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 29, @@ -237,7 +266,8 @@ "dst": "192.168.1.1", "srcport": "44242", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 30, @@ -245,7 +275,8 @@ "dst": "192.168.1.1", "srcport": "44243", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 31, @@ -253,7 +284,8 @@ "dst": "192.168.1.1", "srcport": "44244", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 32, @@ -261,7 +293,8 @@ "dst": "192.168.1.1", "srcport": "44245", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 33, @@ -269,7 +302,8 @@ "dst": "192.168.1.1", "srcport": "44250", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 34, @@ -277,7 +311,8 @@ "dst": "192.168.1.1", "srcport": "44251", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 35, @@ -285,7 +320,8 @@ "dst": "192.168.1.1", "srcport": "44252", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 36, @@ -293,7 +329,8 @@ "dst": "192.168.1.1", "srcport": "44253", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 37, @@ -301,7 +338,8 @@ "dst": "192.168.1.1", "srcport": "44254", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 38, @@ -309,7 +347,8 @@ "dst": "192.168.1.1", "srcport": "44255", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 39, @@ -317,7 +356,8 @@ "dst": "192.168.1.1", "srcport": "44256", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 40, @@ -325,7 +365,8 @@ "dst": "192.168.1.1", "srcport": "44257", "dstport": "41547", - "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000" + "JA4H": "ge11nn050000_e1365771aae9_000000000000_000000000000", + "JA4H_ro": "ge11nn050000_Host,Date,User-Agent,X-AV-Physical-Unit-Info,X-AV-Client-Info_" }, { "stream": 41, @@ -333,7 +374,8 @@ "dst": "192.168.1.1", "srcport": "45058", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 42, @@ -341,7 +383,8 @@ "dst": "192.168.1.1", "srcport": "48482", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 43, @@ -349,7 +392,8 @@ "dst": "192.168.1.1", "srcport": "48484", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 44, @@ -357,7 +401,8 @@ "dst": "192.168.1.1", "srcport": "48486", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 45, @@ -365,7 +410,8 @@ "dst": "192.168.1.1", "srcport": "45060", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 46, @@ -373,7 +419,8 @@ "dst": "104.18.20.64", "srcport": "40978", "dstport": "80", - "JA4H": "ge11nn040000_532a1ee47909_000000000000_000000000000" + "JA4H": "ge11nn040000_532a1ee47909_000000000000_000000000000", + "JA4H_ro": "ge11nn040000_Host,User-Agent,Connection,Accept-Encoding_" }, { "stream": 47, @@ -381,7 +428,8 @@ "dst": "192.168.1.1", "srcport": "60164", "dstport": "41547", - "JA4H": "ge11nn030000_f8649f6808db_000000000000_000000000000" + "JA4H": "ge11nn030000_f8649f6808db_000000000000_000000000000", + "JA4H_ro": "ge11nn030000_Host,Connection,User-Agent_" }, { "stream": 48, @@ -389,7 +437,8 @@ "dst": "192.168.1.1", "srcport": "60180", "dstport": "41547", - "JA4H": "po11nn080000_6977d1188c03_000000000000_000000000000" + "JA4H": "po11nn080000_6977d1188c03_000000000000_000000000000", + "JA4H_ro": "po11nn080000_Host,User-Agent,Content-Length,Content-Type,SOAPAction,Connection,Cache-Control,Pragma_" }, { "stream": 49, @@ -397,7 +446,8 @@ "dst": "192.168.1.1", "srcport": "60186", "dstport": "41547", - "JA4H": "po11nn080000_6977d1188c03_000000000000_000000000000" + "JA4H": "po11nn080000_6977d1188c03_000000000000_000000000000", + "JA4H_ro": "po11nn080000_Host,User-Agent,Content-Length,Content-Type,SOAPAction,Connection,Cache-Control,Pragma_" }, { "stream": 50, @@ -405,7 +455,8 @@ "dst": "192.168.1.1", "srcport": "60200", "dstport": "41547", - "JA4H": "po11nn080000_6977d1188c03_000000000000_000000000000" + "JA4H": "po11nn080000_6977d1188c03_000000000000_000000000000", + "JA4H_ro": "po11nn080000_Host,User-Agent,Content-Length,Content-Type,SOAPAction,Connection,Cache-Control,Pragma_" }, { "stream": 51, @@ -413,7 +464,8 @@ "dst": "192.168.1.1", "srcport": "45062", "dstport": "8080", - "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000" + "JA4H": "po11nn050000_530ceba2075f_000000000000_000000000000", + "JA4H_ro": "po11nn050000_Host,Accept,User-Agent,Content-Type,Content-Length_" }, { "stream": 52, @@ -421,7 +473,8 @@ "dst": "192.168.1.1", "srcport": "60204", "dstport": "41547", - "JA4H": "ge11nn030000_f8649f6808db_000000000000_000000000000" + "JA4H": "ge11nn030000_f8649f6808db_000000000000_000000000000", + "JA4H_ro": "ge11nn030000_Host,Connection,User-Agent_" }, { "stream": 53, @@ -429,7 +482,8 @@ "dst": "192.168.1.1", "srcport": "60220", "dstport": "41547", - "JA4H": "po11nn080000_6977d1188c03_000000000000_000000000000" + "JA4H": "po11nn080000_6977d1188c03_000000000000_000000000000", + "JA4H_ro": "po11nn080000_Host,User-Agent,Content-Length,Content-Type,SOAPAction,Connection,Cache-Control,Pragma_" }, { "stream": 54, @@ -437,7 +491,8 @@ "dst": "192.168.1.1", "srcport": "60222", "dstport": "41547", - "JA4H": "po11nn080000_6977d1188c03_000000000000_000000000000" + "JA4H": "po11nn080000_6977d1188c03_000000000000_000000000000", + "JA4H_ro": "po11nn080000_Host,User-Agent,Content-Length,Content-Type,SOAPAction,Connection,Cache-Control,Pragma_" }, { "stream": 55, @@ -445,6 +500,7 @@ "dst": "192.168.1.1", "srcport": "60230", "dstport": "41547", - "JA4H": "po11nn080000_6977d1188c03_000000000000_000000000000" + "JA4H": "po11nn080000_6977d1188c03_000000000000_000000000000", + "JA4H_ro": "po11nn080000_Host,User-Agent,Content-Length,Content-Type,SOAPAction,Connection,Cache-Control,Pragma_" } ] \ No newline at end of file diff --git a/python/test/testdata/http2-with-cookies.pcapng.json b/python/test/testdata/http2-with-cookies.pcapng.json index 2c2539a..a7e1e0a 100644 --- a/python/test/testdata/http2-with-cookies.pcapng.json +++ b/python/test/testdata/http2-with-cookies.pcapng.json @@ -15,6 +15,7 @@ "JA4_o.1": "t13d1516h2_acb858a92679_e0fccb203dfb", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,0012,0000,000b,4469,001b,ff01,0033,000d,0010,0005,000a,0017,002b,0023,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b", "JA4X.1": "a373a9f83c6b_7022c563de38_2e3757343cb0", "JA4X.2": "a373a9f83c6b_a373a9f83c6b_5d71497f7704", "JA4X.3": "7d5dbb3783b4_a373a9f83c6b_2fbee3f04f3b" @@ -25,7 +26,8 @@ "dst": "142.250.187.206", "srcport": "58847", "dstport": "443", - "JA4H": "ge20cn19enus_cb83bf27b7a9_c7713052b7e4_348cad68b6fb" + "JA4H": "ge20cn19enus_cb83bf27b7a9_c7713052b7e4_348cad68b6fb", + "JA4H_ro": "ge20cn19enus_sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,upgrade-insecure-requests,user-agent,accept,sec-ch-ua-arch,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-bitness,sec-ch-ua-wow64,sec-ch-ua-full-version-list,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-user,sec-fetch-dest,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PSIDCC=APoG2W80ReNqY71qp2I8hZk8BsmVmWk_ejh3LtS-HuboNyHI73aZAnaQhqTWkTHUiz45rCPv" }, { "stream": 0, @@ -33,7 +35,8 @@ "dst": "192.168.2.200", "srcport": "443", "dstport": "58847", - "JA4H": "ge20cn13enus_8e33b43baae9_e43af2e8abfe_015bb0ca5596" + "JA4H": "ge20cn13enus_8e33b43baae9_e43af2e8abfe_015bb0ca5596", + "JA4H_ro": "ge20cn13enus_upgrade-insecure-requests,user-agent,accept,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-user,sec-fetch-dest,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,SIDCC,__Secure-1PSIDCC,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,SIDCC=APoG2W9RK6clrsnkAMIVg0rYm3am1HkEfg8dAPun6iMCVEt_0tkuDFLdjjiADNirDnahrwzeAQ,__Secure-1PSIDCC=APoG2W81CyAxqg4qdIqnAV5zkvXLzRfSMgA4mkydeWg9IeL-6814d1G7t95sNNSRTqgzkZji,__Secure-3PSIDCC=APoG2W_WfImJeKcVAH4O7muEBxWxwaZd-WwKWyO1PfcqO-vHYfyX0O9GCzXU0t6LNlvXg9w7" }, { "stream": 0, @@ -41,7 +44,8 @@ "dst": "192.168.2.200", "srcport": "443", "dstport": "58847", - "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7" + "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7", + "JA4H_ro": "ge20cr18enus_sec-ch-ua,sec-ch-ua-mobile,user-agent,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-full-version-list,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-ua-wow64,sec-ch-ua-platform,accept,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,YSC,VISITOR_PRIVACY_METADATA,SIDCC,__Secure-1PSIDCC,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,YSC=fmJvKZ98ZzM,VISITOR_PRIVACY_METADATA=CgJDQRICGgA%3D,SIDCC=APoG2W_-Qsh5iRlLVDzN2OkIW0cAz_0yN7-rr-KCkBL1IXxKRG0CdQP6-ZkTxzy7D4H-DselDw,__Secure-1PSIDCC=APoG2W-ysomredm6Llr5hD-_lAbJvmQ7uTdjhZQS5pPUXf4Avu9tKLhKjZXAlGhtseKPB6dC,__Secure-3PSIDCC=APoG2W-TOlRHTYrgLGQiaBdvBhHjJ9JVpf6IZAguDfwj958a7ObWfITcu9ql2EdL0cxQ_e33" }, { "stream": 0, @@ -49,7 +53,8 @@ "dst": "142.250.187.206", "srcport": "58847", "dstport": "443", - "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7" + "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7", + "JA4H_ro": "ge20cr18enus_sec-ch-ua,sec-ch-ua-mobile,user-agent,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-full-version-list,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-ua-wow64,sec-ch-ua-platform,accept,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,YSC,VISITOR_PRIVACY_METADATA,SIDCC,__Secure-1PSIDCC,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,YSC=fmJvKZ98ZzM,VISITOR_PRIVACY_METADATA=CgJDQRICGgA%3D,SIDCC=APoG2W_-Qsh5iRlLVDzN2OkIW0cAz_0yN7-rr-KCkBL1IXxKRG0CdQP6-ZkTxzy7D4H-DselDw,__Secure-1PSIDCC=APoG2W-ysomredm6Llr5hD-_lAbJvmQ7uTdjhZQS5pPUXf4Avu9tKLhKjZXAlGhtseKPB6dC,__Secure-3PSIDCC=APoG2W-TOlRHTYrgLGQiaBdvBhHjJ9JVpf6IZAguDfwj958a7ObWfITcu9ql2EdL0cxQ_e33" }, { "stream": 0, @@ -57,7 +62,8 @@ "dst": "142.250.187.206", "srcport": "58847", "dstport": "443", - "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7" + "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7", + "JA4H_ro": "ge20cr18enus_sec-ch-ua,sec-ch-ua-mobile,user-agent,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-full-version-list,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-ua-wow64,sec-ch-ua-platform,accept,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,YSC,VISITOR_PRIVACY_METADATA,SIDCC,__Secure-1PSIDCC,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,YSC=fmJvKZ98ZzM,VISITOR_PRIVACY_METADATA=CgJDQRICGgA%3D,SIDCC=APoG2W_-Qsh5iRlLVDzN2OkIW0cAz_0yN7-rr-KCkBL1IXxKRG0CdQP6-ZkTxzy7D4H-DselDw,__Secure-1PSIDCC=APoG2W-ysomredm6Llr5hD-_lAbJvmQ7uTdjhZQS5pPUXf4Avu9tKLhKjZXAlGhtseKPB6dC,__Secure-3PSIDCC=APoG2W-TOlRHTYrgLGQiaBdvBhHjJ9JVpf6IZAguDfwj958a7ObWfITcu9ql2EdL0cxQ_e33" }, { "stream": 0, @@ -65,7 +71,8 @@ "dst": "142.250.187.206", "srcport": "58847", "dstport": "443", - "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7" + "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7", + "JA4H_ro": "ge20cr18enus_sec-ch-ua,sec-ch-ua-mobile,user-agent,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-full-version-list,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-ua-wow64,sec-ch-ua-platform,accept,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,YSC,VISITOR_PRIVACY_METADATA,SIDCC,__Secure-1PSIDCC,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,YSC=fmJvKZ98ZzM,VISITOR_PRIVACY_METADATA=CgJDQRICGgA%3D,SIDCC=APoG2W_-Qsh5iRlLVDzN2OkIW0cAz_0yN7-rr-KCkBL1IXxKRG0CdQP6-ZkTxzy7D4H-DselDw,__Secure-1PSIDCC=APoG2W-ysomredm6Llr5hD-_lAbJvmQ7uTdjhZQS5pPUXf4Avu9tKLhKjZXAlGhtseKPB6dC,__Secure-3PSIDCC=APoG2W-TOlRHTYrgLGQiaBdvBhHjJ9JVpf6IZAguDfwj958a7ObWfITcu9ql2EdL0cxQ_e33" }, { "stream": 0, @@ -73,7 +80,8 @@ "dst": "142.250.187.206", "srcport": "58847", "dstport": "443", - "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7" + "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7", + "JA4H_ro": "ge20cr18enus_sec-ch-ua,sec-ch-ua-mobile,user-agent,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-full-version-list,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-ua-wow64,sec-ch-ua-platform,accept,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,YSC,VISITOR_PRIVACY_METADATA,SIDCC,__Secure-1PSIDCC,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,YSC=fmJvKZ98ZzM,VISITOR_PRIVACY_METADATA=CgJDQRICGgA%3D,SIDCC=APoG2W_-Qsh5iRlLVDzN2OkIW0cAz_0yN7-rr-KCkBL1IXxKRG0CdQP6-ZkTxzy7D4H-DselDw,__Secure-1PSIDCC=APoG2W-ysomredm6Llr5hD-_lAbJvmQ7uTdjhZQS5pPUXf4Avu9tKLhKjZXAlGhtseKPB6dC,__Secure-3PSIDCC=APoG2W-TOlRHTYrgLGQiaBdvBhHjJ9JVpf6IZAguDfwj958a7ObWfITcu9ql2EdL0cxQ_e33" }, { "stream": 0, @@ -81,7 +89,8 @@ "dst": "192.168.2.200", "srcport": "443", "dstport": "58847", - "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7" + "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7", + "JA4H_ro": "ge20cr18enus_sec-ch-ua,sec-ch-ua-mobile,user-agent,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-full-version-list,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-ua-wow64,sec-ch-ua-platform,accept,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,YSC,VISITOR_PRIVACY_METADATA,SIDCC,__Secure-1PSIDCC,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,YSC=fmJvKZ98ZzM,VISITOR_PRIVACY_METADATA=CgJDQRICGgA%3D,SIDCC=APoG2W_-Qsh5iRlLVDzN2OkIW0cAz_0yN7-rr-KCkBL1IXxKRG0CdQP6-ZkTxzy7D4H-DselDw,__Secure-1PSIDCC=APoG2W-ysomredm6Llr5hD-_lAbJvmQ7uTdjhZQS5pPUXf4Avu9tKLhKjZXAlGhtseKPB6dC,__Secure-3PSIDCC=APoG2W-TOlRHTYrgLGQiaBdvBhHjJ9JVpf6IZAguDfwj958a7ObWfITcu9ql2EdL0cxQ_e33" }, { "stream": 0, @@ -89,7 +98,8 @@ "dst": "142.250.187.206", "srcport": "58847", "dstport": "443", - "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7" + "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7", + "JA4H_ro": "ge20cr18enus_sec-ch-ua,sec-ch-ua-mobile,user-agent,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-full-version-list,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-ua-wow64,sec-ch-ua-platform,accept,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,YSC,VISITOR_PRIVACY_METADATA,SIDCC,__Secure-1PSIDCC,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,YSC=fmJvKZ98ZzM,VISITOR_PRIVACY_METADATA=CgJDQRICGgA%3D,SIDCC=APoG2W_-Qsh5iRlLVDzN2OkIW0cAz_0yN7-rr-KCkBL1IXxKRG0CdQP6-ZkTxzy7D4H-DselDw,__Secure-1PSIDCC=APoG2W-ysomredm6Llr5hD-_lAbJvmQ7uTdjhZQS5pPUXf4Avu9tKLhKjZXAlGhtseKPB6dC,__Secure-3PSIDCC=APoG2W-TOlRHTYrgLGQiaBdvBhHjJ9JVpf6IZAguDfwj958a7ObWfITcu9ql2EdL0cxQ_e33" }, { "stream": 0, @@ -97,7 +107,8 @@ "dst": "142.250.187.206", "srcport": "58847", "dstport": "443", - "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7" + "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7", + "JA4H_ro": "ge20cr18enus_sec-ch-ua,sec-ch-ua-mobile,user-agent,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-full-version-list,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-ua-wow64,sec-ch-ua-platform,accept,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,YSC,VISITOR_PRIVACY_METADATA,SIDCC,__Secure-1PSIDCC,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,YSC=fmJvKZ98ZzM,VISITOR_PRIVACY_METADATA=CgJDQRICGgA%3D,SIDCC=APoG2W_-Qsh5iRlLVDzN2OkIW0cAz_0yN7-rr-KCkBL1IXxKRG0CdQP6-ZkTxzy7D4H-DselDw,__Secure-1PSIDCC=APoG2W-ysomredm6Llr5hD-_lAbJvmQ7uTdjhZQS5pPUXf4Avu9tKLhKjZXAlGhtseKPB6dC,__Secure-3PSIDCC=APoG2W-TOlRHTYrgLGQiaBdvBhHjJ9JVpf6IZAguDfwj958a7ObWfITcu9ql2EdL0cxQ_e33" }, { "stream": 0, @@ -105,7 +116,8 @@ "dst": "142.250.187.206", "srcport": "58847", "dstport": "443", - "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7" + "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7", + "JA4H_ro": "ge20cr18enus_sec-ch-ua,sec-ch-ua-mobile,user-agent,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-full-version-list,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-ua-wow64,sec-ch-ua-platform,accept,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,YSC,VISITOR_PRIVACY_METADATA,SIDCC,__Secure-1PSIDCC,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,YSC=fmJvKZ98ZzM,VISITOR_PRIVACY_METADATA=CgJDQRICGgA%3D,SIDCC=APoG2W_-Qsh5iRlLVDzN2OkIW0cAz_0yN7-rr-KCkBL1IXxKRG0CdQP6-ZkTxzy7D4H-DselDw,__Secure-1PSIDCC=APoG2W-ysomredm6Llr5hD-_lAbJvmQ7uTdjhZQS5pPUXf4Avu9tKLhKjZXAlGhtseKPB6dC,__Secure-3PSIDCC=APoG2W-TOlRHTYrgLGQiaBdvBhHjJ9JVpf6IZAguDfwj958a7ObWfITcu9ql2EdL0cxQ_e33" }, { "stream": 0, @@ -113,7 +125,8 @@ "dst": "142.250.187.206", "srcport": "58847", "dstport": "443", - "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7" + "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7", + "JA4H_ro": "ge20cr18enus_sec-ch-ua,sec-ch-ua-mobile,user-agent,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-full-version-list,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-ua-wow64,sec-ch-ua-platform,accept,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,YSC,VISITOR_PRIVACY_METADATA,SIDCC,__Secure-1PSIDCC,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,YSC=fmJvKZ98ZzM,VISITOR_PRIVACY_METADATA=CgJDQRICGgA%3D,SIDCC=APoG2W_-Qsh5iRlLVDzN2OkIW0cAz_0yN7-rr-KCkBL1IXxKRG0CdQP6-ZkTxzy7D4H-DselDw,__Secure-1PSIDCC=APoG2W-ysomredm6Llr5hD-_lAbJvmQ7uTdjhZQS5pPUXf4Avu9tKLhKjZXAlGhtseKPB6dC,__Secure-3PSIDCC=APoG2W-TOlRHTYrgLGQiaBdvBhHjJ9JVpf6IZAguDfwj958a7ObWfITcu9ql2EdL0cxQ_e33" }, { "stream": 0, @@ -121,7 +134,8 @@ "dst": "142.250.187.206", "srcport": "58847", "dstport": "443", - "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7" + "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7", + "JA4H_ro": "ge20cr18enus_sec-ch-ua,sec-ch-ua-mobile,user-agent,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-full-version-list,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-ua-wow64,sec-ch-ua-platform,accept,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,YSC,VISITOR_PRIVACY_METADATA,SIDCC,__Secure-1PSIDCC,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,YSC=fmJvKZ98ZzM,VISITOR_PRIVACY_METADATA=CgJDQRICGgA%3D,SIDCC=APoG2W_-Qsh5iRlLVDzN2OkIW0cAz_0yN7-rr-KCkBL1IXxKRG0CdQP6-ZkTxzy7D4H-DselDw,__Secure-1PSIDCC=APoG2W-ysomredm6Llr5hD-_lAbJvmQ7uTdjhZQS5pPUXf4Avu9tKLhKjZXAlGhtseKPB6dC,__Secure-3PSIDCC=APoG2W-TOlRHTYrgLGQiaBdvBhHjJ9JVpf6IZAguDfwj958a7ObWfITcu9ql2EdL0cxQ_e33" }, { "stream": 0, @@ -129,7 +143,8 @@ "dst": "142.250.187.206", "srcport": "58847", "dstport": "443", - "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7" + "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7", + "JA4H_ro": "ge20cr18enus_sec-ch-ua,sec-ch-ua-mobile,user-agent,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-full-version-list,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-ua-wow64,sec-ch-ua-platform,accept,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,YSC,VISITOR_PRIVACY_METADATA,SIDCC,__Secure-1PSIDCC,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,YSC=fmJvKZ98ZzM,VISITOR_PRIVACY_METADATA=CgJDQRICGgA%3D,SIDCC=APoG2W_-Qsh5iRlLVDzN2OkIW0cAz_0yN7-rr-KCkBL1IXxKRG0CdQP6-ZkTxzy7D4H-DselDw,__Secure-1PSIDCC=APoG2W-ysomredm6Llr5hD-_lAbJvmQ7uTdjhZQS5pPUXf4Avu9tKLhKjZXAlGhtseKPB6dC,__Secure-3PSIDCC=APoG2W-TOlRHTYrgLGQiaBdvBhHjJ9JVpf6IZAguDfwj958a7ObWfITcu9ql2EdL0cxQ_e33" }, { "stream": 0, @@ -137,6 +152,7 @@ "dst": "142.250.187.206", "srcport": "58847", "dstport": "443", - "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7" + "JA4H": "ge20cr18enus_40430d236f7c_10ff48fdaa11_ac323afc21f7", + "JA4H_ro": "ge20cr18enus_sec-ch-ua,sec-ch-ua-mobile,user-agent,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-full-version-list,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-ua-wow64,sec-ch-ua-platform,accept,x-client-data,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,accept-encoding,accept-language_VISITOR_INFO1_LIVE,LOGIN_INFO,SID,__Secure-1PSIDTS,__Secure-3PSIDTS,__Secure-1PSID,__Secure-3PSID,HSID,SSID,APISID,SAPISID,__Secure-1PAPISID,__Secure-3PAPISID,YSC,VISITOR_PRIVACY_METADATA,SIDCC,__Secure-1PSIDCC,__Secure-3PSIDCC_VISITOR_INFO1_LIVE=5CuVaSL9wDE,LOGIN_INFO=AFmmF2swRgIhAOltLQJUxXKDwpOeYd1REmFWIv-SZOX5_Mt3l8dB8TUyAiEAq9Hxidx9TIYr9Usi0QvZwoAY7hWdD0TrwUBJ-vDNhFw:QUQ3MjNmeHlXOVFoOGc1bWNjT2VKNnZPVlJzVktiM3pXc2ExNENfTkFqZzh6SEFIODBCWUo2d0hZU1preThtcjVjNW1oV1NXX2dXbV9laUsxN2gxNlRMZGM4QlVEMkJNVFR3UWpfbWtoSTdXSlVYUnRIekJiVmxXT0NLMklXRmxDSEZ1M2xDYkZjYld5NTg2azdMOTRuSFg0SEQ1NmhCcXJR,SID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3oyvm4YN6azbdj99oAEv6g.,__Secure-1PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-3PSIDTS=sidts-CjEB3e41hfRDIv3qE6IhIGL4regkBrZQzMepIsMI60XzPXMHjuDBFb8Jzi6e3Q_XguntEAA,__Secure-1PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK3ZH4QQAFpOKIred2Wu8QgA.,__Secure-3PSID=bAiSGpEASIdYDutJlWaOLSpT-A0OtSymfAqQHglc8wCyKvJK9erTPZ3XpDCPS4p8f5PnjQ.,HSID=AOF5tyazl7ZAKFyZY,SSID=AqFHwVpJHIK9H1lfZ,APISID=pEXHoyISD5STpHG9/AajENhWjLXnfNmbhI,SAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-1PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,__Secure-3PAPISID=_4e9wsQoZw81B655/A2zwmxsRQhzaXtNW0,YSC=fmJvKZ98ZzM,VISITOR_PRIVACY_METADATA=CgJDQRICGgA%3D,SIDCC=APoG2W_-Qsh5iRlLVDzN2OkIW0cAz_0yN7-rr-KCkBL1IXxKRG0CdQP6-ZkTxzy7D4H-DselDw,__Secure-1PSIDCC=APoG2W-ysomredm6Llr5hD-_lAbJvmQ7uTdjhZQS5pPUXf4Avu9tKLhKjZXAlGhtseKPB6dC,__Secure-3PSIDCC=APoG2W-TOlRHTYrgLGQiaBdvBhHjJ9JVpf6IZAguDfwj958a7ObWfITcu9ql2EdL0cxQ_e33" } ] \ No newline at end of file diff --git a/python/test/testdata/ipv6.pcapng.json b/python/test/testdata/ipv6.pcapng.json index 1bb0a02..ee929b4 100644 --- a/python/test/testdata/ipv6.pcapng.json +++ b/python/test/testdata/ipv6.pcapng.json @@ -15,6 +15,7 @@ "JA4_o.1": "t12d4605h2_644f5d117d98_094daec7ec8d", "JA4_ro.1": "t12d4605h2_c030,c02c,c028,c024,c014,c00a,009f,006b,0039,cca9,cca8,ccaa,ff85,00c4,0088,0081,009d,003d,0035,00c0,0084,c02f,c02b,c027,c023,c013,c009,009e,0067,0033,00be,0045,009c,003c,002f,00ba,0041,c011,c007,0005,0004,c012,c008,0016,000a,00ff_0000,000b,000a,000d,0010_0601,0603,efef,0501,0503,0401,0403,eeee,eded,0301,0303,0201,0203", "JA4S": "t1204h2_cca9_1428ce7b4018", + "JA4S_r": "t1204h2_cca9_0000,ff01,000b,0010", "JA4X.1": "7d5dbb3783b4_ba7ce0880c07_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_7d5dbb3783b4_41a019652939" } diff --git a/python/test/testdata/latest.pcapng.json b/python/test/testdata/latest.pcapng.json index 0bb8786..41a6109 100644 --- a/python/test/testdata/latest.pcapng.json +++ b/python/test/testdata/latest.pcapng.json @@ -15,6 +15,7 @@ "JA4_o.1": "t13d1516h2_acb858a92679_9aeef56da6aa", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,ff01,0000,001b,0012,4469,002d,002b,000d,0010,0033,000a,0005,0017,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t1206h2_c02f_3603f09c43ba", + "JA4S_r": "t1206h2_c02f_0000,000b,ff01,0010,0023,0017", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_a83ffcd6e6c2" }, @@ -34,6 +35,7 @@ "JA4_o.1": "t12d190800_e8d5f427a2c5_5e98404dd3cc", "JA4_ro.1": "t12d190800_c02c,c02b,c030,c02f,c024,c023,c028,c027,c00a,c009,c014,c013,009d,009c,003d,003c,0035,002f,000a_0000,0005,000a,000b,000d,0023,0017,ff01_0804,0805,0806,0401,0501,0201,0403,0503,0203,0202,0601,0603", "JA4S": "t120600_c02f_51ad275821ba", + "JA4S_r": "t120600_c02f_0000,000b,ff01,0005,0023,0017", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_a83ffcd6e6c2" }, @@ -43,7 +45,8 @@ "dst": "23.43.242.57", "srcport": "52939", "dstport": "80", - "JA4H": "ge11nn07enus_3e3b55d61660_000000000000_000000000000" + "JA4H": "ge11nn07enus_3e3b55d61660_000000000000_000000000000", + "JA4H_ro": "ge11nn07enus_Host,Connection,User-Agent,Accept-Encoding,Accept-Language,If-None-Match,If-Modified-Since_" }, { "stream": 9, @@ -96,7 +99,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,0029,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_ff8ca026d952", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,0010,0000,000b,0023,4469,ff01,0033,000a,002d,002b,0005,0017,0012,001b,0029_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130300_1301_6bbbaf601ed8" + "JA4S": "t130300_1301_6bbbaf601ed8", + "JA4S_r": "t130300_1301_0029,0033,002b" }, { "stream": 6, diff --git a/python/test/testdata/macos_tcp_flags.pcap.json b/python/test/testdata/macos_tcp_flags.pcap.json index 8eabb07..2aecfe5 100644 --- a/python/test/testdata/macos_tcp_flags.pcap.json +++ b/python/test/testdata/macos_tcp_flags.pcap.json @@ -14,6 +14,7 @@ "JA4_r.1": "t13d2613h2_000a,002f,0035,003c,003d,009c,009d,1301,1302,1303,c008,c009,c00a,c012,c013,c014,c023,c024,c027,c028,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,002b,002d,0033,ff01_0403,0804,0401,0503,0203,0805,0805,0501,0806,0601,0201", "JA4_o.1": "t13d2613h2_78a7dc604b78_93870a65b655", "JA4_ro.1": "t13d2613h2_1301,1302,1303,c02c,c02b,c024,c023,c00a,c009,cca9,c030,c02f,c028,c027,c014,c013,cca8,009d,009c,003d,003c,0035,002f,c008,c012,000a_ff01,0000,0017,000d,0005,0012,0010,000b,0033,002d,002b,000a,0015_0403,0804,0401,0503,0203,0805,0805,0501,0806,0601,0201", - "JA4S": "t130200_1301_234ea6891581" + "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b" } ] \ No newline at end of file diff --git a/python/test/testdata/single-packets.pcap.json b/python/test/testdata/single-packets.pcap.json index eb729c3..98c6bec 100644 --- a/python/test/testdata/single-packets.pcap.json +++ b/python/test/testdata/single-packets.pcap.json @@ -5,7 +5,8 @@ "dst": "74.125.24.149", "srcport": "49677", "dstport": "80", - "JA4H": "ge11cr06enus_8c2f9ef95269_2a79f5d9f8b3_7b4d78c057bc" + "JA4H": "ge11cr06enus_8c2f9ef95269_2a79f5d9f8b3_7b4d78c057bc", + "JA4H_ro": "ge11cr06enus_Accept,Accept-Language,User-Agent,Accept-Encoding,Host,Connection_IDE_IDE=AHWqTUmq5vKag4U1NoZpmbEiY1PYuAYVT8bFXA1KRM6sqXH_QR5G3_2xSz7V6E3B" }, { "stream": 1, @@ -13,7 +14,8 @@ "dst": "118.215.80.242", "srcport": "49654", "dstport": "80", - "JA4H": "ge11cr07enus_45c71a3fb6ea_a25bf252eb59_43a9e3e95c85" + "JA4H": "ge11cr07enus_45c71a3fb6ea_a25bf252eb59_43a9e3e95c85", + "JA4H_ro": "ge11cr07enus_Accept,X-Requested-With,Accept-Language,Accept-Encoding,User-Agent,Host,Connection__ga,_gid,_gat,AMCV_A70E15F354E99A260A4C98A4%40AdobeOrg,AMCVS_A70E15F354E99A260A4C98A4%40AdobeOrg,mbox,s_dfa,s_cc,s_ppvl,s_ppv,s_sq,segmentid,aam_uuid,app_promotion__ga=GA1.2.349209205.1532525440,_gid=GA1.2.1042544967.1532525440,_gat=1,AMCV_A70E15F354E99A260A4C98A4%40AdobeOrg=-330454231%7CMCIDTS%7C17738%7CMCMID%7C00834244270283740751404491874386840551%7CMCAAMLH-1533130240%7C3%7CMCAAMB-1533130240%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1532532640s%7CNONE%7CMCSYNCSOP%7C411-17745%7CMCAID%7CNONE%7CvVersion%7C3.1.2,AMCVS_A70E15F354E99A260A4C98A4%40AdobeOrg=1,mbox=session#f11f91da64134d8183e8dda4dc10aaf4#1532527370|PC#f11f91da64134d8183e8dda4dc10aaf4.22_23#1540301510|check#true#1532525570,s_dfa=shgshg-web-global,s_cc=true,s_ppvl=www.shangri-la.com%2C52%2C52%2C499%2C1350%2C498%2C1350%2C615%2C1%2CL,s_ppv=www.shangri-la.com%2C48%2C48%2C498%2C1350%2C498%2C1350%2C615%2C1%2CL,s_sq=%5B%5BB%5D%5D,segmentid=segment%3DC%2Csegment%3Dtesting,aam_uuid=01107346641427687611431242460084872101,app_promotion=1" }, { "stream": 2, @@ -21,7 +23,8 @@ "dst": "13.115.50.210", "srcport": "49683", "dstport": "80", - "JA4H": "ge11nr06enus_8c2f9ef95269_000000000000_000000000000" + "JA4H": "ge11nr06enus_8c2f9ef95269_000000000000_000000000000", + "JA4H_ro": "ge11nr06enus_Accept,Accept-Language,User-Agent,Accept-Encoding,Host,Connection_" }, { "stream": 3, @@ -29,7 +32,8 @@ "dst": "104.89.119.175", "srcport": "49708", "dstport": "80", - "JA4H": "po11cr09enus_130d8cd1913c_f81c0e5c6793_90689f748de6" + "JA4H": "po11cr09enus_130d8cd1913c_f81c0e5c6793_90689f748de6", + "JA4H_ro": "po11cr09enus_Accept,Accept-Language,User-Agent,Content-Type,Accept-Encoding,Host,Content-Length,Connection,Cache-Control_RT,ServerPool_RT=%1%enc%3Atg%2FlU7zufFPUle8wLxga3M9JuU9Wqi9L5JCsWOqGF5aUK4qCG413AHFq%2BvIG1jhcNox8JbUSTxk%3D,ServerPool=R" }, { "stream": 4, @@ -37,7 +41,8 @@ "dst": "193.242.192.43", "srcport": "49735", "dstport": "80", - "JA4H": "ge11cr07enus_45c71a3fb6ea_9ee64e91aa30_109254663367" + "JA4H": "ge11cr07enus_45c71a3fb6ea_9ee64e91aa30_109254663367", + "JA4H_ro": "ge11cr07enus_Accept,X-Requested-With,Accept-Language,Accept-Encoding,User-Agent,Host,Connection_CFID,CFTOKEN,unescomap,_ga,_gid,_gat_CFID=77281563,CFTOKEN=64733241d30c35e0-304F31D8-AA72-F50C-3869AA2C5D0DFF17,unescomap=open,_ga=GA1.2.1751603294.1532525413,_gid=GA1.2.775336169.1532525413,_gat=1" }, { "stream": 5, @@ -45,7 +50,8 @@ "dst": "74.125.24.100", "srcport": "49733", "dstport": "80", - "JA4H": "ge11nr06enus_8c2f9ef95269_000000000000_000000000000" + "JA4H": "ge11nr06enus_8c2f9ef95269_000000000000_000000000000", + "JA4H_ro": "ge11nr06enus_Accept,Accept-Language,User-Agent,Accept-Encoding,Host,Connection_" }, { "stream": 6, @@ -53,7 +59,8 @@ "dst": "74.125.24.95", "srcport": "49743", "dstport": "80", - "JA4H": "ge11nr06enus_8c2f9ef95269_000000000000_000000000000" + "JA4H": "ge11nr06enus_8c2f9ef95269_000000000000_000000000000", + "JA4H_ro": "ge11nr06enus_Accept,Accept-Language,User-Agent,Accept-Encoding,Host,Connection_" }, { "stream": 7, @@ -61,6 +68,7 @@ "dst": "35.174.150.168", "srcport": "49738", "dstport": "80", - "JA4H": "ge11cr06enus_8c2f9ef95269_d23bf79698dc_c1eaa758c543" + "JA4H": "ge11cr06enus_8c2f9ef95269_d23bf79698dc_c1eaa758c543", + "JA4H_ro": "ge11cr06enus_Accept,Accept-Language,User-Agent,Accept-Encoding,Host,Connection_visitor_id413862,visitor_id413862-hash,pardot_visitor_id413862=286585660,visitor_id413862-hash=1f00bdb076b5fb707c70254849819ec1797d3e27cef91a61a9488cb7ca0ebf77f226caa4075591b2591bf9a1ccdf29432c67379b,pardot=tee2foreb3fefpgvk8u1056vt3" } ] \ No newline at end of file diff --git a/python/test/testdata/ssh2.pcapng.json b/python/test/testdata/ssh2.pcapng.json index 3e14611..5d32274 100644 --- a/python/test/testdata/ssh2.pcapng.json +++ b/python/test/testdata/ssh2.pcapng.json @@ -15,6 +15,7 @@ "JA4_o.1": "t12d190800_e8d5f427a2c5_5e98404dd3cc", "JA4_ro.1": "t12d190800_c02c,c02b,c030,c02f,c024,c023,c028,c027,c00a,c009,c014,c013,009d,009c,003d,003c,0035,002f,000a_0000,0005,000a,000b,000d,0023,0017,ff01_0804,0805,0806,0401,0501,0201,0403,0503,0203,0202,0601,0603", "JA4S": "t120400_c02f_4993ccf7354b", + "JA4S_r": "t120400_c02f_0017,ff01,000b,0023", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_a83ffcd6e6c2" }, @@ -34,6 +35,7 @@ "JA4_o.1": "t12d1909h2_e8d5f427a2c5_5da3d607c71a", "JA4_ro.1": "t12d1909h2_c02c,c02b,c030,c02f,c024,c023,c028,c027,c00a,c009,c014,c013,009d,009c,003d,003c,0035,002f,000a_0000,0005,000a,000b,000d,0023,0010,0017,ff01_0804,0805,0806,0401,0501,0201,0403,0503,0203,0202,0601,0603", "JA4S": "t120500_c02f_6471ab80eb72", + "JA4S_r": "t120500_c02f_0000,000b,ff01,0023,0017", "JA4X.1": "f7a0b866a27b_30b9c68c9fc8_8f2dd91f85ae", "JA4X.2": "f7a0b866a27b_f7a0b866a27b_b189698ac141" }, @@ -89,6 +91,7 @@ "JA4_o.1": "t12d1909h2_e8d5f427a2c5_5da3d607c71a", "JA4_ro.1": "t12d1909h2_c02c,c02b,c030,c02f,c024,c023,c028,c027,c00a,c009,c014,c013,009d,009c,003d,003c,0035,002f,000a_0000,0005,000a,000b,000d,0023,0010,0017,ff01_0804,0805,0806,0401,0501,0201,0403,0503,0203,0202,0601,0603", "JA4S": "t120200_c02f_344b4dce5a52", + "JA4S_r": "t120200_c02f_ff01,000b", "JA4X.1": "a373a9f83c6b_7022c563de38_7bf9a7bf7029", "JA4X.2": "a373a9f83c6b_a373a9f83c6b_3684c5172069", "JA4X.3": "2bab15409345_a373a9f83c6b_44ce05048d28", @@ -100,7 +103,8 @@ "dst": "184.150.157.177", "srcport": "57380", "dstport": "80", - "JA4H": "ge11nn030000_9ab90a797ba7_000000000000_000000000000" + "JA4H": "ge11nn030000_9ab90a797ba7_000000000000_000000000000", + "JA4H_ro": "ge11nn030000_Connection,User-Agent,Host_" }, { "stream": 22, @@ -108,7 +112,8 @@ "dst": "184.150.157.177", "srcport": "57396", "dstport": "80", - "JA4H": "ge11nn030000_9ab90a797ba7_000000000000_000000000000" + "JA4H": "ge11nn030000_9ab90a797ba7_000000000000_000000000000", + "JA4H_ro": "ge11nn030000_Connection,User-Agent,Host_" }, { "stream": 33, diff --git a/python/test/testdata/tls-alpn-h2.pcap.json b/python/test/testdata/tls-alpn-h2.pcap.json index 1bb0a02..ee929b4 100644 --- a/python/test/testdata/tls-alpn-h2.pcap.json +++ b/python/test/testdata/tls-alpn-h2.pcap.json @@ -15,6 +15,7 @@ "JA4_o.1": "t12d4605h2_644f5d117d98_094daec7ec8d", "JA4_ro.1": "t12d4605h2_c030,c02c,c028,c024,c014,c00a,009f,006b,0039,cca9,cca8,ccaa,ff85,00c4,0088,0081,009d,003d,0035,00c0,0084,c02f,c02b,c027,c023,c013,c009,009e,0067,0033,00be,0045,009c,003c,002f,00ba,0041,c011,c007,0005,0004,c012,c008,0016,000a,00ff_0000,000b,000a,000d,0010_0601,0603,efef,0501,0503,0401,0403,eeee,eded,0301,0303,0201,0203", "JA4S": "t1204h2_cca9_1428ce7b4018", + "JA4S_r": "t1204h2_cca9_0000,ff01,000b,0010", "JA4X.1": "7d5dbb3783b4_ba7ce0880c07_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_7d5dbb3783b4_41a019652939" } diff --git a/python/test/testdata/tls-handshake.pcapng.json b/python/test/testdata/tls-handshake.pcapng.json index 11da5cd..8c61eec 100644 --- a/python/test/testdata/tls-handshake.pcapng.json +++ b/python/test/testdata/tls-handshake.pcapng.json @@ -11,6 +11,7 @@ "JA4_o.1": "t13d1516h1_acb858a92679_5eba26eeae83", "JA4_ro.1": "t13d1516h1_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,0033,0000,ff01,002b,0023,002d,0005,0012,000b,0017,4469,0010,001b,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t120300_c030_bec8bdbaef8a", + "JA4S_r": "t120300_c030_ff01,000b,0023", "JA4X.1": "a373a9f83c6b_2bab15409345_5a6862e71bea", "JA4X.2": "0b479b1b5763_a373a9f83c6b_2fbee3f04f3b" }, @@ -26,6 +27,7 @@ "JA4_o.1": "t13d1516h2_acb858a92679_687a3a2ce3c4", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,ff01,002b,0000,4469,001b,000b,0012,0005,000d,0017,002d,0010,000a,0023,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t1206h1_c02b_9bd66850b8f2", + "JA4S_r": "t1206h1_c02b_ff01,0000,000b,0023,0005,0010", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_a83ffcd6e6c2" }, @@ -41,6 +43,7 @@ "JA4_o.1": "t13d1516h2_acb858a92679_397d290f0301", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,0012,001b,000b,002d,0017,002b,0005,0023,000a,4469,000d,ff01,0033,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t1206h2_c02b_9bd66850b8f2", + "JA4S_r": "t1206h2_c02b_ff01,0000,000b,0023,0005,0010", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_a83ffcd6e6c2" }, @@ -56,6 +59,7 @@ "JA4_o.1": "t13d1516h2_acb858a92679_942bc1763a61", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000b,0005,0000,0017,000a,0033,002b,0012,000d,ff01,0010,0023,002d,001b,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t1206h2_c02f_46cf7c3c6b8f", + "JA4S_r": "t1206h2_c02f_ff01,0000,000b,0005,0010,0017", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_a83ffcd6e6c2", "JA4X.3": "7d5dbb3783b4_7d5dbb3783b4_f269f029c206" @@ -86,6 +90,7 @@ "JA4_o.1": "t13d1516h2_acb858a92679_4360d1c81b7c", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,ff01,001b,0023,0000,0033,000a,000b,0005,0010,000d,0012,002d,4469,002b,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t1204h2_c02f_1428ce7b4018", + "JA4S_r": "t1204h2_c02f_0000,ff01,000b,0010", "JA4X.1": "a373a9f83c6b_2bab15409345_7bf9a7bf7029", "JA4X.2": "7d5dbb3783b4_a373a9f83c6b_a83ffcd6e6c2", "JA4X.3": "7d5dbb3783b4_7d5dbb3783b4_f269f029c206" @@ -101,7 +106,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_8fc3c02244b2", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_ff01,0033,002d,0005,4469,000d,0010,0023,001b,002b,0000,0012,000a,0017,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_234ea6891581" + "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b" }, { "stream": 1, @@ -114,7 +120,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_2331e95fde68", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,0017,ff01,0010,000d,002b,0005,0023,0033,0000,0012,000b,000a,4469,002d,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_234ea6891581" + "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b" }, { "stream": 2, @@ -127,7 +134,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_18f69afefd3d", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,0000,0033,0010,4469,0017,002d,000d,0005,0023,0012,002b,ff01,000b,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_234ea6891581" + "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b" }, { "stream": 3, @@ -140,7 +148,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_c8388c21e187", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0005,0000,ff01,0010,4469,001b,002d,002b,0023,000d,0012,000b,0033,000a,0017,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_234ea6891581" + "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b" }, { "stream": 4, @@ -153,7 +162,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_3af4d4b9d2d4", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_ff01,0005,002b,001b,000a,0033,000b,000d,0000,002d,0023,0012,0017,0010,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 6, @@ -166,7 +176,8 @@ "JA4_r.1": "t13d151400_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d151400_acb858a92679_2f4561be1d1f", "JA4_ro.1": "t13d151400_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,002b,001b,0000,0012,002d,000d,000a,0005,0023,0017,ff01,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_234ea6891581" + "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b" }, { "stream": 7, @@ -179,7 +190,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_73544b4297c0", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0005,000b,ff01,0033,0017,001b,000a,4469,002b,0012,002d,0010,0023,000d,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_234ea6891581" + "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b" }, { "stream": 8, @@ -192,7 +204,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_1314decb33ff", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,000d,ff01,000b,002d,4469,0010,0017,002b,0012,0033,000a,0005,0000,0023,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_234ea6891581" + "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b" }, { "stream": 9, @@ -205,7 +218,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_330ce4f319a8", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,002d,0033,0010,001b,002b,0005,000a,000d,ff01,0000,0012,0017,4469,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_234ea6891581" + "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b" }, { "stream": 10, @@ -218,7 +232,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_b16532485edd", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,4469,000d,0000,0017,0033,002b,0012,ff01,0023,002d,000b,001b,0005,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_234ea6891581" + "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b" }, { "stream": 11, @@ -231,7 +246,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_427cac041d07", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,4469,0017,002d,000a,000b,ff01,000d,0023,002b,001b,0005,0000,0010,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 12, @@ -244,7 +260,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_538a2f938823", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,ff01,0012,002d,001b,000a,0000,0017,0023,0033,0005,002b,0010,000b,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 13, @@ -257,7 +274,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_686a0be4bd30", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,0010,000d,0017,4469,0000,001b,0023,0012,0005,000a,000b,ff01,002d,002b,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 14, @@ -270,7 +288,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_b7e224026524", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,0023,000b,0017,0000,002d,002b,0033,000d,0005,0010,4469,ff01,000a,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 15, @@ -283,7 +302,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_2861a6985939", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000a,0033,0000,000b,4469,0005,000d,0017,002d,002b,ff01,001b,0023,0010,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 16, @@ -296,7 +316,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_7889df4981c5", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,0010,000a,002b,4469,0000,0033,0017,001b,0023,000d,0012,ff01,0005,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 17, @@ -309,7 +330,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_8173fc330948", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,0005,000b,4469,0017,0012,ff01,000d,0010,001b,000a,0033,002b,002d,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 18, @@ -322,7 +344,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_2af320308976", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,ff01,000a,002b,001b,4469,000b,0010,0023,0033,0005,000d,002d,0012,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 19, @@ -335,7 +358,8 @@ "JA4_r.1": "t13d1516h1_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h1_acb858a92679_4d217f5c60c0", "JA4_ro.1": "t13d1516h1_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,4469,0010,000a,002b,0033,001b,0017,0023,000b,0000,0005,ff01,002d,000d,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 20, @@ -348,7 +372,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_0ba12093491f", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002b,0017,002d,0005,4469,000d,0012,0023,000a,001b,ff01,0033,000b,0000,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 21, @@ -361,7 +386,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_55d7fff9dff7", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0000,002b,000d,0010,002d,001b,000b,0023,ff01,0017,0012,0033,0005,4469,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 22, @@ -374,7 +400,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_e089cde5ad66", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_4469,000b,0033,002b,ff01,0000,0017,0023,001b,002d,000a,0010,0012,000d,0005,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 23, @@ -387,7 +414,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_c1d170c535e5", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,0010,0012,002b,0005,001b,0017,000d,4469,0033,0000,000b,ff01,0023,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 24, @@ -400,7 +428,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_9be69fbcfb74", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,000d,0023,001b,0005,002d,000b,0017,ff01,002b,4469,0033,000a,0000,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 25, @@ -413,7 +442,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_8d31aaae1631", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,0010,0000,0033,001b,0012,000d,0023,0005,ff01,000b,002d,000a,002b,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 26, @@ -426,7 +456,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_07af8028e23e", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,0000,000b,000a,0023,0012,002b,002d,000d,ff01,0017,4469,0005,0033,001b,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 27, @@ -439,7 +470,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_3ec2c7066647", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_4469,000d,0017,0023,002b,0005,0010,002d,001b,0000,0012,000b,000a,0033,ff01,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 28, @@ -452,7 +484,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_a9cc25f93fb0", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000a,ff01,0010,002b,000b,0000,4469,0017,0012,000d,002d,0033,0023,001b,0005,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 29, @@ -465,7 +498,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_5cfab8711ae5", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,0010,0000,0005,0033,ff01,4469,002d,0012,000d,001b,0017,000a,002b,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_234ea6891581" + "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b" }, { "stream": 30, @@ -478,7 +512,8 @@ "JA4_r.1": "t13d1516h1_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h1_acb858a92679_a5ce045fadd3", "JA4_ro.1": "t13d1516h1_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,0000,0023,000d,0017,0005,0010,0012,ff01,002b,001b,000b,000a,0033,4469,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 31, @@ -491,7 +526,8 @@ "JA4_r.1": "t13d1517h1_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,0029,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1517h1_acb858a92679_98b2855b1dea", "JA4_ro.1": "t13d1517h1_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0000,0017,0005,002b,0012,0023,000a,0033,0010,002d,001b,4469,000b,000d,ff01,0015,0029_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130300_1301_0ee26285a86f" + "JA4S": "t130300_1301_0ee26285a86f", + "JA4S_r": "t130300_1301_002b,0033,0029" }, { "stream": 32, @@ -504,7 +540,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_4aa408e2c085", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,0005,000b,0000,001b,0023,002d,000d,ff01,4469,002b,0017,0010,0012,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 35, @@ -517,7 +554,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_da9349461c3b", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,000b,0005,0000,000d,ff01,4469,0012,0017,002b,001b,002d,000a,0033,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 36, @@ -530,7 +568,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_497901d2ace7", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,0023,000a,000b,0000,0005,ff01,4469,002b,0017,001b,002d,000d,0033,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 37, @@ -543,7 +582,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_81dcec84e300", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000a,0012,002b,ff01,0000,0017,000d,000b,002d,001b,4469,0010,0033,0023,0005,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 38, @@ -557,6 +597,7 @@ "JA4_o.1": "t13d1516h2_acb858a92679_0e6a3d869d9d", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0005,001b,0033,002d,4469,000a,000d,0012,ff01,000b,0023,002b,0000,0017,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033", "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.2": "t13d1515h2_acb858a92679_b90d13bf6f98", @@ -573,7 +614,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_8b5fc429a01a", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,002b,4469,0012,0023,002d,0000,000b,0033,000a,0005,0017,ff01,001b,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 41, @@ -587,6 +629,7 @@ "JA4_o.1": "t13d1516h2_acb858a92679_5ec2817d7b86", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,000d,001b,002b,0000,4469,0023,ff01,0033,000a,0017,002d,000b,0010,0005,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033", "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.2": "t13d1515h2_acb858a92679_b0ba2f989aea", @@ -604,6 +647,7 @@ "JA4_o.1": "t13d1516h2_acb858a92679_fbf4c64f425f", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,001b,000b,0012,0010,002b,ff01,0033,0005,0000,0023,000a,002d,4469,000d,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033", "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.2": "t13d1515h2_acb858a92679_c95bfa41ab5d", @@ -621,6 +665,7 @@ "JA4_o.1": "t13d1516h2_acb858a92679_f044a1abfa22", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002b,001b,000a,0033,0012,0005,000d,0000,002d,0017,0010,ff01,4469,000b,0023,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033", "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.2": "t13d1515h2_acb858a92679_253bca5d0b80", @@ -638,6 +683,7 @@ "JA4_o.1": "t13d1516h2_acb858a92679_3395779fe3fb", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0017,ff01,0023,002b,002d,000d,0005,001b,000a,4469,0010,0000,0033,000b,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601", "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033", "JA4.2": "t13d1515h2_8daaf6152771_f37e75b10bcc", "JA4_r.2": "t13d1515h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.2": "t13d1515h2_acb858a92679_1fea980e9d76", @@ -654,7 +700,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_cf768f5c9444", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,0005,002d,4469,0012,ff01,0023,0017,000a,0000,0033,0010,000b,001b,002b,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 48, @@ -667,7 +714,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_6e8cce17e7d7", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,000a,0005,4469,0033,002d,0017,0012,000b,001b,0023,ff01,002b,000d,0000,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 49, @@ -680,7 +728,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_f825e233d654", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000a,0000,0033,0023,0017,002d,4469,001b,0010,ff01,000d,0012,002b,0005,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 50, @@ -693,7 +742,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_021f89855834", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,4469,002b,002d,0000,0005,000a,ff01,001b,0017,0010,0033,000b,0012,000d,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 51, @@ -706,7 +756,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_883fa5a7a13b", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_4469,000a,001b,000b,0000,0023,000d,0017,002b,0033,ff01,002d,0005,0012,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 52, @@ -719,7 +770,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_dfed22113221", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,0023,0005,001b,0000,002d,0017,4469,000b,000d,0012,ff01,000a,002b,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 53, @@ -732,7 +784,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_d50c88625340", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,0017,0023,0012,0000,002b,002d,000a,000b,ff01,000d,0033,4469,0005,001b,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 54, @@ -745,7 +798,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_26c01394417b", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0005,0010,000a,000b,002b,000d,001b,002d,4469,0023,0033,0000,ff01,0012,0017,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 55, @@ -758,7 +812,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_0c4877241e3c", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0010,0012,002b,000a,000b,ff01,0005,000d,0023,001b,0033,0017,4469,0000,002d,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 56, @@ -771,7 +826,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_0c637659a2d5", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,0023,ff01,0000,000b,0017,0033,000a,002b,0005,000d,0012,4469,001b,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 57, @@ -784,7 +840,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_f0c0f532ba7c", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,0000,0010,0023,0017,002d,4469,000a,0005,ff01,001b,002b,000b,000d,0012,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1302_a56c5b993250" + "JA4S": "t130200_1302_a56c5b993250", + "JA4S_r": "t130200_1302_002b,0033" }, { "stream": 58, @@ -797,6 +854,7 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_5276cb03a33b", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0000,0033,000d,0023,000b,ff01,000a,001b,4469,0012,002d,0010,0005,002b,0017,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_234ea6891581" + "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b" } ] \ No newline at end of file diff --git a/python/test/testdata/tls-non-ascii-alpn.pcapng.json b/python/test/testdata/tls-non-ascii-alpn.pcapng.json index 0022617..154cc97 100644 --- a/python/test/testdata/tls-non-ascii-alpn.pcapng.json +++ b/python/test/testdata/tls-non-ascii-alpn.pcapng.json @@ -10,6 +10,7 @@ "JA4_r.1": "t13d151699_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d151699_acb858a92679_8fc3c02244b2", "JA4_ro.1": "t13d151699_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_ff01,0033,002d,0005,4469,000d,0010,0023,001b,002b,0000,0012,000a,0017,000b,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_234ea6891581" + "JA4S": "t130200_1301_234ea6891581", + "JA4S_r": "t130200_1301_0033,002b" } ] \ No newline at end of file diff --git a/python/test/testdata/tls3.pcapng.json b/python/test/testdata/tls3.pcapng.json index 9fa573a..6146c5c 100644 --- a/python/test/testdata/tls3.pcapng.json +++ b/python/test/testdata/tls3.pcapng.json @@ -5,7 +5,8 @@ "dst": "23.222.12.9", "srcport": "63249", "dstport": "80", - "JA4H": "ge11nn07enus_3e3b55d61660_000000000000_000000000000" + "JA4H": "ge11nn07enus_3e3b55d61660_000000000000_000000000000", + "JA4H_ro": "ge11nn07enus_Host,Connection,User-Agent,Accept-Encoding,Accept-Language,If-None-Match,If-Modified-Since_" }, { "stream": 21, @@ -87,7 +88,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_9948b1e7c6e7", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0023,0033,ff01,000a,0012,0005,0017,4469,0000,001b,000d,002d,000b,002b,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 8, @@ -115,7 +117,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,0029,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_01fb3542df69", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0033,000a,0005,000d,0012,0000,0010,002b,0023,001b,0017,002d,ff01,4469,000b,0029_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130300_1301_0ee26285a86f" + "JA4S": "t130300_1301_0ee26285a86f", + "JA4S_r": "t130300_1301_002b,0033,0029" }, { "stream": 10, @@ -132,7 +135,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,0029,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_cd85e435c726", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,000b,ff01,0017,0010,0005,002b,4469,0000,0012,000d,001b,000a,0023,0033,0029_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130300_1301_0ee26285a86f" + "JA4S": "t130300_1301_0ee26285a86f", + "JA4S_r": "t130300_1301_002b,0033,0029" }, { "stream": 11, @@ -149,7 +153,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,001b,0023,0029,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_02518cc01a32", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_001b,000a,4469,0023,002b,0033,000d,000b,ff01,002d,0000,0017,0005,0010,0012,0029_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130300_1301_6bbbaf601ed8" + "JA4S": "t130300_1301_6bbbaf601ed8", + "JA4S_r": "t130300_1301_0029,0033,002b" }, { "stream": 12, @@ -166,7 +171,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_117873b7a39c", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_002d,000b,ff01,0023,000a,0000,001b,4469,0017,000d,002b,0012,0005,0033,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 13, @@ -183,7 +189,8 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_09de6778cc55", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_000d,001b,000b,4469,0023,0005,ff01,002d,0000,0012,0017,000a,0033,002b,0010,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" }, { "stream": 14, @@ -200,6 +207,7 @@ "JA4_r.1": "t13d1516h2_002f,0035,009c,009d,1301,1302,1303,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0015,0017,001b,0023,002b,002d,0033,4469,ff01_0403,0804,0401,0503,0805,0501,0806,0601", "JA4_o.1": "t13d1516h2_acb858a92679_0500216284de", "JA4_ro.1": "t13d1516h2_1301,1302,1303,c02b,c02f,c02c,c030,cca9,cca8,c013,c014,009c,009d,002f,0035_0012,001b,0023,0010,000b,0005,002b,0033,ff01,000d,002d,0017,4469,0000,000a,0015_0403,0804,0401,0503,0805,0501,0806,0601", - "JA4S": "t130200_1301_a56c5b993250" + "JA4S": "t130200_1301_a56c5b993250", + "JA4S_r": "t130200_1301_002b,0033" } ] \ No newline at end of file