Hi there, I am having a problem with Suricata as it does not seem to be reporting the correct JA3 hashes. I am comparing them to the ones I have in Wireshark and the ones in Wireshark are correct. I have JA3 enabled in the yaml config file so I’m unsure why I am getting inaccurate hashes. I feel li…

Seem to be getting wrong hashes for JA3

Andreas_Herz (Andreas Herz) April 20, 2021, 8:31pm 6

How do you start and run Suricata?

Topic		Replies	Views
JA3 hashes not matching TLSv1.3 Help rules , suricata	11	418	April 18, 2024
How does one output all JA3/JA3S Hashes calculated by Suricata from a PCAP file Help	4	1243	February 8, 2022
Suricaa doesn't capture JA3 hashes of TLS packets Help rules , suricata	1	278	February 28, 2024
Why suricata don't generate filehash for alerts Help	17	2206	September 15, 2023
Hash detection issue Help	1	352	February 15, 2021