Skip to content

Releases: FoxIO-LLC/ja4

ja4-wireshark-plugins-2024.11.08.19: Merge pull request #181 from MattCarothers/fix_python_string_copy_crash

08 Nov 21:19
3f37b93
Compare
Choose a tag to compare

v0.18.4

30 Sep 15:57
1631c58
Compare
Choose a tag to compare
ci (release.yml): Allow missing CHANGELOG.md entry (#176)

In rare cases (e.g. #174) we may want to run the "release" CI job
to generate the binaries without making any code changes.

ja4-wireshark-plugins-2024.09.27.55: Merge pull request #171 from vnetman/main

27 Sep 14:55
1dd6666
Compare
Choose a tag to compare
Fix 4.0 plugin build breakage. Update binaries for 4.0, 4.2 and 4.4.

ja4-wireshark-plugins-2024.09.20.17

20 Sep 19:17
bc1806c
Compare
Choose a tag to compare
automated builds for linux, mac and windows wireshark plugins (#170)

v0.18.3

10 Sep 20:53
126df0f
Compare
Choose a tag to compare

Fixed

  • Fix parsing of tshark --version output.

Updating Tag for zkg install

21 Mar 19:43
2597395
Compare
Choose a tag to compare

Updating Release Tag to fix Zeek "zkg install" installing an old version of JA4+

v0.18.1

05 Feb 14:06
16e9298
Compare
Choose a tag to compare

Fixed

  • JA4H: Sort cookie-pairs properly (#58).

v0.18.0

04 Feb 01:53
db49b59
Compare
Choose a tag to compare

Fixed

  • Generate a JA4SSH fingerprint every 200 SSH (layer 7) packets.
  • Fix calculation of JA4H_c (#58).

v0.17.0

01 Feb 13:55
c1e85f8
Compare
Choose a tag to compare

Fixed

  • JA4SSH (mode of TCP payload length): Handle collisions, resolve nondeterminism (#51).
  • JA4L: Fix a panic that only reproduced in dev mode (#51).
  • Fix processing of GRE tunneling traffic (#51).
  • Skip packets with "icmpv6" layer (#51).

Changed

  • ja4: Improve debug logging.
  • ja4x: Provide more context in the error message (#52).

v0.16.2

04 Jan 15:25
fe853f6
Compare
Choose a tag to compare

Fixed

  • JA4: Include SNI (0000) and ALPN (0010) in the "original" outputs (#40).
  • JA4H: Search for "Cookie" and "Referer" fields in a case-insensitive fashion.
  • JA4: Take signature algorithm hex values from signature_algorithms extension only (#41).