diff options
| author | liuxueli <[email protected]> | 2024-09-14 16:26:34 +0800 |
|---|---|---|
| committer | liuxueli <[email protected]> | 2024-10-16 11:47:27 +0800 |
| commit | 93d17f6f5a116854fa05f5ef55b18baea9ca987b (patch) | |
| tree | df9705fbc372c38f0c83a48076617d72b1c2db91 | |
| parent | 482b1ac98c28ccf1908e1c7aeb9927135dfda494 (diff) | |
Feature: Support calculating JA4/JA4S fingerprintv3.2.0
| -rw-r--r-- | .gitlab-ci.yml | 2 | ||||
| -rw-r--r-- | CMakeLists.txt | 2 | ||||
| -rw-r--r-- | include/ssl.h | 12 | ||||
| -rw-r--r-- | src/SSL_Message.c | 461 | ||||
| -rw-r--r-- | test/CMakeLists.txt | 1 | ||||
| -rw-r--r-- | test/pcap/bug/ssl_bug_result.json | 43 | ||||
| -rw-r--r-- | test/pcap/client_hello_fragment/ssl_client_hello_fragment_result.json | 5 | ||||
| -rw-r--r-- | test/pcap/close_contains_payload/ssl_close_contains_payload_result.json | 56 | ||||
| -rw-r--r-- | test/pcap/e21/ssl_e21_target_result.json | 1069 | ||||
| -rw-r--r-- | test/pcap/extensions_exceed_16/extensions_exceed_16_result.json | 1 | ||||
| -rw-r--r-- | test/pcap/multiple_handshake/ssl_multiple_handshake_result.json | 46 | ||||
| -rw-r--r-- | test/pcap/ssl/ssl_result.json | 110 | ||||
| -rw-r--r-- | test/pcap/tcp_ack_contians_payload/ssl_tcp_ack_contians_payload_result.json | 14 | ||||
| -rw-r--r-- | test/pcap/tlcp/tlcp_result.json | 2 | ||||
| -rw-r--r-- | test/pcap/xxg/ssl_xxg_target_result.json | 2978 | ||||
| -rw-r--r-- | test/ssl_test_plug.cpp | 17 |
16 files changed, 2904 insertions, 1915 deletions
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 0f41c46..5253be4 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -3,7 +3,7 @@ variables: BUILD_IMAGE_CENTOS8: "git.mesalab.cn:7443/mesa_platform/build-env:rockylinux" BUILD_PADDING_PREFIX: /tmp/padding_for_CPACK_RPM_BUILD_SOURCE_DIRS_PREFIX_PREFIX_PREFIX_PREFIX_PREFIX_PREFIX/ INSTALL_DEPENDENCY_PLATFORM: sapp-devel libasan systemd-devel libnsl - INSTALL_DEPENDENCY_FRAMEWORK: libMESA_handle_logger-devel libcjson-devel libfieldstat4-devel libMESA_field_stat2-devel framework_env libMESA_prof_load-devel libbreakpad_mini-devel libMESA_htable-devel + INSTALL_DEPENDENCY_FRAMEWORK: libMESA_handle_logger-devel libcjson-devel libfieldstat4-devel libMESA_field_stat2-devel framework_env libMESA_prof_load-devel libbreakpad_mini-devel libMESA_htable-devel libuuid-devel INSTALL_PREFIX: "/home/mesasoft/sapp_run/" stages: diff --git a/CMakeLists.txt b/CMakeLists.txt index 7217e0a..97cdace 100644 --- a/CMakeLists.txt +++ b/CMakeLists.txt @@ -50,8 +50,6 @@ else() endif() include_directories(/opt/MESA/include/MESA/) -include_directories(./src/inc/) -include_directories(./src/) include_directories(include) add_subdirectory(support) diff --git a/include/ssl.h b/include/ssl.h index 6ef7f83..e8f7140 100644 --- a/include/ssl.h +++ b/include/ssl.h @@ -30,7 +30,10 @@ enum ssl_interested_region #define TLSV1_0_VERSION 0x0301 #define TLSV1_1_VERSION 0x0302 #define TLSV1_2_VERSION 0x0303 +#define TLSV1_3_VERSION 0x0304 #define DTLSV1_0_VERSION 0xfeff +#define DTLSV1_2_VERSION 0xfefd +#define DTLSV1_3_VERSION 0xfefc #define DTLSV1_0_VERSION_NOT 0x0100 #define TLCPV1_VERSION 0x0101 @@ -80,8 +83,8 @@ struct ssl_extenstions; #define MAX_JA_MD5_STR_LEN 128 struct ssl_ja_fingerprint { - int md5_len; - char md5[MAX_JA_MD5_STR_LEN]; + int value_sz; + char value[MAX_JA_MD5_STR_LEN]; }; #define MAX_SERVER_NAME_LEN 512 @@ -100,6 +103,7 @@ struct ssl_client_hello struct ssl_encrypt_server_name esni; char server_name[MAX_SERVER_NAME_LEN]; struct ssl_ja_fingerprint ja3; + struct ssl_ja_fingerprint ja4; }; struct ssl_server_hello @@ -108,12 +112,14 @@ struct ssl_server_hello unsigned short version; unsigned short extension_len; unsigned short extension_num; - struct ssl_ja_fingerprint ja3s; + struct ssl_random random; struct ssl_l1v session; struct ssl_l2v ciphersuites; struct ssl_l1v compress_method; struct ssl_extenstions *extensions; + struct ssl_ja_fingerprint ja3s; + struct ssl_ja_fingerprint ja4s; }; struct ssl_new_session_ticket diff --git a/src/SSL_Message.c b/src/SSL_Message.c index 823d6f2..8673b4e 100644 --- a/src/SSL_Message.c +++ b/src/SSL_Message.c @@ -4,6 +4,7 @@ #include <string.h> #include <stdlib.h> #include <openssl/md5.h> +#include <openssl/sha.h> #include "utarray.h" #include "utstring.h" @@ -34,6 +35,9 @@ #define EC_POINT_FORMATS_EXT_TYPE 0x000B +#define SUPPORTED_VERSIONS 0x002B +#define SIGNATURE_ALGORITHMS 0x000D + // https://datatracker.ietf.org/doc/html/rfc7919 // Supported Groups #define SUPPORTED_GROUPS_EXT_TYPE 0x000A @@ -43,6 +47,7 @@ extern struct ssl_serial_string g_astCipherSuit; +UT_icd UT_ssl_hello_ciphersuites_icd={sizeof(unsigned short), NULL, NULL, NULL}; UT_icd UT_ssl_hello_extension_icd={sizeof(struct ssl_l2tv), NULL, NULL, NULL}; struct ssl_extenstions @@ -68,7 +73,22 @@ const struct ssl_value2string ssl_version_list[] = { UNKNOWN_VERSION, NULL } }; -int ja3_md5sum(const char *str, int len, char *buf, int size) +static int ja4_sha256(const char *string, size_t string_sz, unsigned char *hash, size_t hash_sz) +{ + if(string==NULL || string_sz==0 || hash_sz<SHA256_DIGEST_LENGTH) + { + return -1; + } + + SHA256_CTX sha256; + SHA256_Init(&sha256); // Initialize the SHA256 context + SHA256_Update(&sha256, string, string_sz); // Add data to the hash + SHA256_Final(hash, &sha256); // Get the final hash value + + return 0; +} + +static int ja3_md5sum(const char *string, size_t string_sz, char *buf, int size) { int n; int ret = 0; @@ -76,7 +96,7 @@ int ja3_md5sum(const char *str, int len, char *buf, int size) unsigned char tmp[MD5_DIGEST_LENGTH]; MD5_Init(&ctx); - MD5_Update(&ctx, str, len); + MD5_Update(&ctx, string, string_sz); MD5_Final(tmp, &ctx); for (n = 0; n < MD5_DIGEST_LENGTH; n++) @@ -440,8 +460,8 @@ int ssl_parse_client_hello(struct ssl_client_hello *chello, unsigned char *paylo /*get extension*/ unsigned short extensions_len=(unsigned short)BtoL2BytesNum((const char *)(payload+offset)); offset+=sizeof(extensions_len); - - for(int i=0; payload_len-offset >= 4; i++) // min len of ext is 4 byte + unsigned short ex_offset=0; + for(int i=0; (payload_len-offset >= 4) && ex_offset<extensions_len; i++) // min len of ext is 4 byte { struct ssl_l2tv extension={0}; one_ltv=ssl_parse_ltv2(&(extension), payload+offset, payload_len-offset); @@ -451,6 +471,12 @@ int ssl_parse_client_hello(struct ssl_client_hello *chello, unsigned char *paylo } offset+=one_ltv; + ex_offset+=one_ltv; + + if(ssl_is_grease_value(extension.type)==SSL_TRUE) + { + continue; + } utarray_push_back(chello->extensions->value, &extension); @@ -569,12 +595,339 @@ void ssl_chello_ja3_generate(struct ssl_client_hello *chello) } } - chello->ja3.md5_len=ja3_md5sum(utstring_body(ja3_string), utstring_len(ja3_string), chello->ja3.md5, sizeof(chello->ja3.md5)); - chello->ja3.md5[chello->ja3.md5_len]='\0'; + chello->ja3.value_sz=ja3_md5sum(utstring_body(ja3_string), utstring_len(ja3_string), chello->ja3.value, sizeof(chello->ja3.value)); + chello->ja3.value[chello->ja3.value_sz]='\0'; utstring_free(ja3_string); } +int ssl_hello_extension_sort(const void *a, const void *b) +{ + struct ssl_l2tv *ext_a=(struct ssl_l2tv *)a; + struct ssl_l2tv *ext_b=(struct ssl_l2tv *)b; + + if(ext_a->type > ext_b->type) + { + return 1; + } + else if(ext_a->type < ext_b->type) + { + return -1; + } + else + { + return 0; + } +} + +int ssl_hello_short_sort(const void *a, const void *b) +{ + unsigned short suite_a=*(unsigned short *)a; + unsigned short suite_b=*(unsigned short *)b; + + if(suite_a > suite_b) + { + return 1; + } + else if(suite_a < suite_b) + { + return -1; + } + else + { + return 0; + } +} + +const char *ssl_hello_version_convert(unsigned short version) +{ + switch(version) + { + case SSLV2_VERSION: + return "s2"; + case SSLV3_VERSION: + return "s3"; + case TLSV1_0_VERSION: + return "10"; + case TLSV1_1_VERSION: + return "11"; + case TLSV1_2_VERSION: + return "12"; + case TLSV1_3_VERSION: + return "13"; + case DTLSV1_0_VERSION: + return "d1"; + case DTLSV1_2_VERSION: + return "d2"; + case DTLSV1_3_VERSION: + return "d3"; + case DTLSV1_0_VERSION_NOT: + return "00"; + case TLCPV1_VERSION: + return "00"; + default: + break; + } + + return NULL; +} + +const char *ssl_hello_supported_version_get(struct ssl_l2tv *supported_version) +{ + if(supported_version==NULL || supported_version->value==NULL || supported_version->len==0) + { + return NULL; + } + + // get length + unsigned short len=BtoL1BytesNum((const char *)(supported_version->value)); + if(len==0 || len>supported_version->len) + { + return NULL; + } + + // get version + for(int i=1; i<len; i+=2) + { + unsigned short version=BtoL2BytesNum((const char *)(supported_version->value+i)); + if(ssl_is_grease_value(version)==SSL_TRUE) + { + continue; + } + + return ssl_hello_version_convert(version); + } + + return NULL; +} + +size_t ssl_hello_apln_first_protocol_get(struct ssl_l2tv *alpn, char *alpn_first_proto, size_t alpn_first_proto_sz) +{ + if(alpn==NULL || alpn->value==NULL || alpn->len==0 || alpn_first_proto_sz<=2) + { + return 0; + } + + // get length + unsigned short len=BtoL2BytesNum((const char *)(alpn->value)); + if(len==0 || len>alpn->len) + { + return 0; + } + size_t offset=2; + + // get first protocol length + unsigned char proto_len=BtoL1BytesNum((const char *)(alpn->value+2)); + if(proto_len<=1 || proto_len>len) + { + return 0; + } + + offset+=1; + + // get first protocol + alpn_first_proto[0]=BtoL1BytesNum((const char *)(alpn->value+offset)); + alpn_first_proto[1]=BtoL1BytesNum((const char *)(alpn->value+offset+proto_len-1)); + + return 2; +} + +UT_array *ssl_hello_cipher_suites_array_get(struct ssl_l2v *ciphersuites) +{ + if(ciphersuites==NULL || ciphersuites->value==NULL || ciphersuites->len==0) + { + return NULL; + } + + UT_array *cs_array; + utarray_new(cs_array, &UT_ssl_hello_ciphersuites_icd); + + for(unsigned short i=0; i<ciphersuites->len; i+=2) + { + unsigned short cipher_suite=BtoL2BytesNum((const char *)(ciphersuites->value+i)); + if(ssl_is_grease_value(cipher_suite)==SSL_TRUE) + { + continue; + } + + utarray_push_back(cs_array, &cipher_suite); + } + + return cs_array; +} + +UT_array *ssl_hello_signature_algorithms_array_get(struct ssl_l2tv *signature_algorithms) +{ + if(signature_algorithms==NULL || signature_algorithms->value==NULL || signature_algorithms->len==0) + { + return NULL; + } + + UT_array *sa_array; + utarray_new(sa_array, &UT_ssl_hello_ciphersuites_icd); + + unsigned short len=BtoL2BytesNum((const char *)(signature_algorithms->value)); + if(len==0 || len>signature_algorithms->len) + { + return NULL; + } + + size_t offset=2; + for(unsigned short i=0; i<len; i+=2) + { + unsigned short signature_algorithm=BtoL2BytesNum((const char *)(signature_algorithms->value+i+offset)); + if(ssl_is_grease_value(signature_algorithm)==SSL_TRUE) + { + continue; + } + + utarray_push_back(sa_array, &signature_algorithm); + } + + return sa_array; +} + +// https://github.com/FoxIO-LLC/ja4/blob/main/technical_details/JA4.md +// https://blog.cloudflare.com/ja4-signals/ +void ssl_chello_ja4_generate(struct ssl_client_hello *chello) +{ + if(chello==NULL) + { + return; + } + + UT_array *cs_array=ssl_hello_cipher_suites_array_get(&(chello->ciphersuites)); + utarray_sort(cs_array, &ssl_hello_short_sort); + + UT_array *ext_dup; + utarray_new(ext_dup, &UT_ssl_hello_extension_icd); + utarray_concat(ext_dup, chello->extensions->value); + utarray_sort(ext_dup, &ssl_hello_extension_sort); + + size_t alpn_first_proto_sz=0; + char alpn_first_proto[4]={0}; + char *supported_versions=NULL; + struct ssl_l2tv *signature_algorithms=NULL; + + for(uint32_t i=0; i<utarray_len(ext_dup); i++) + { + struct ssl_l2tv *ext=(struct ssl_l2tv *)utarray_eltptr(ext_dup, i); + if(ext==NULL || ssl_is_grease_value(ext->type)) + { + continue; + } + + switch(ext->type) + { + case ALPN_EXT_TYPE: + alpn_first_proto_sz=ssl_hello_apln_first_protocol_get(ext, alpn_first_proto, sizeof(alpn_first_proto)); + break; + case SUPPORTED_VERSIONS: + supported_versions=(char *)ssl_hello_supported_version_get(ext); + break; + case SIGNATURE_ALGORITHMS: + signature_algorithms=ext; + break; + default: + break; + } + } + + if(supported_versions==NULL) + { + supported_versions=(char *)ssl_hello_version_convert(chello->version); + } + + UT_string *ja4_a; + utstring_new(ja4_a); + utstring_printf(ja4_a, + "t%s%s%02u%02u%s_", + ((supported_versions==NULL) ? "00" : supported_versions), + (strlen(chello->server_name)>0 ? "d" : "i"), + ((utarray_len(cs_array) > 99) ? 99 : utarray_len(cs_array)), + ((utarray_len(ext_dup) > 99) ? 99 : utarray_len(ext_dup)), + ((alpn_first_proto_sz==0) ? "00" : alpn_first_proto) + ); + + UT_string *ja4_b; + utstring_new(ja4_b); + for(uint32_t i=0; i<utarray_len(cs_array); i++) + { + unsigned short *value=(unsigned short *)utarray_eltptr(cs_array, i); + utstring_printf(ja4_b, "%s%04x", (i==0 ? "" : ","), *value); + } + + UT_string *ja4_c; + utstring_new(ja4_c); + int32_t flag=SSL_FALSE; + for(uint32_t i=0; i<utarray_len(ext_dup); i++) + { + struct ssl_l2tv *ext=(struct ssl_l2tv *)utarray_eltptr(ext_dup, i); + if(ext==NULL || ssl_is_grease_value(ext->type)) + { + continue; + } + + if(ext->type==ALPN_EXT_TYPE || ext->type==SERVER_NAME_EXT_TYPE) + { + continue; + } + + utstring_printf(ja4_c, "%s%04x", ((flag==SSL_FALSE) ? "" : ","), ext->type); + flag=SSL_TRUE; + } + + UT_array *sa_array=ssl_hello_signature_algorithms_array_get(signature_algorithms); + if(sa_array) + { + utstring_printf(ja4_c, "_"); + //utarray_sort(sa_array, &ssl_hello_short_sort); + for(uint32_t i=0; i<utarray_len(sa_array); i++) + { + unsigned short *value=(unsigned short *)utarray_eltptr(sa_array, i); + utstring_printf(ja4_c, "%s%04x", (i==0 ? "" : ","), *value); + } + } + + if(utstring_len(ja4_b)>0) + { + unsigned char ja4_b_sha256[SHA256_DIGEST_LENGTH]; + ja4_sha256(utstring_body(ja4_b), utstring_len(ja4_b), ja4_b_sha256, sizeof(ja4_b_sha256)); + utstring_printf(ja4_a, "%02x%02x%02x%02x%02x%02x", ja4_b_sha256[0], ja4_b_sha256[1], ja4_b_sha256[2], ja4_b_sha256[3], ja4_b_sha256[4], ja4_b_sha256[5]); + } + else + { + utstring_printf(ja4_a, "000000000000"); + } + + if(utstring_len(ja4_c)>0) + { + unsigned char ja4_c_sha256[SHA256_DIGEST_LENGTH]; + ja4_sha256(utstring_body(ja4_c), utstring_len(ja4_c), ja4_c_sha256, sizeof(ja4_c_sha256)); + utstring_printf(ja4_a, "_%02x%02x%02x%02x%02x%02x", ja4_c_sha256[0], ja4_c_sha256[1], ja4_c_sha256[2], ja4_c_sha256[3], ja4_c_sha256[4], ja4_c_sha256[5]); + } + else + { + utstring_printf(ja4_a, "_000000000000"); + } + + chello->ja4.value_sz=MIN(utstring_len(ja4_a), sizeof(chello->ja4)-1); + memcpy(chello->ja4.value, utstring_body(ja4_a), chello->ja4.value_sz); + + if(cs_array!=NULL) + { + utarray_free(cs_array); + } + if(sa_array!=NULL) + { + utarray_free(sa_array); + } + utarray_free(ext_dup); + utstring_free(ja4_a); + utstring_free(ja4_b); + utstring_free(ja4_c); +} + int ssl_parse_server_hello(struct ssl_server_hello *shello, unsigned char *payload, int payload_len) { int offset=0,one_ltv=0; @@ -644,6 +997,11 @@ int ssl_parse_server_hello(struct ssl_server_hello *shello, unsigned char *paylo offset+=one_ltv; ex_offset+=one_ltv; + if(ssl_is_grease_value(extension.type)==SSL_TRUE) + { + continue; + } + utarray_push_back(shello->extensions->value, &extension); } } @@ -676,12 +1034,97 @@ void ssl_shello_ja3s_generate(struct ssl_server_hello *shello) flag=SSL_TRUE; } - shello->ja3s.md5_len=ja3_md5sum(utstring_body(ja3s_string), utstring_len(ja3s_string), shello->ja3s.md5, sizeof(shello->ja3s.md5)); - shello->ja3s.md5[shello->ja3s.md5_len]='\0'; + shello->ja3s.value_sz=ja3_md5sum(utstring_body(ja3s_string), utstring_len(ja3s_string), shello->ja3s.value, sizeof(shello->ja3s.value)); + shello->ja3s.value[shello->ja3s.value_sz]='\0'; utstring_free(ja3s_string); } +void ssl_shello_ja4s_generate(struct ssl_server_hello *shello) +{ + if(shello==NULL) + { + return ; + } + + size_t alpn_first_proto_sz=0; + char alpn_first_proto[4]={0}; + char *supported_versions=NULL; + + for(uint32_t i=0; i<utarray_len(shello->extensions->value); i++) + { + struct ssl_l2tv *ext=(struct ssl_l2tv *)utarray_eltptr(shello->extensions->value, i); + if(ext==NULL || ssl_is_grease_value(ext->type)) + { + continue; + } + + switch(ext->type) + { + case ALPN_EXT_TYPE: + alpn_first_proto_sz=ssl_hello_apln_first_protocol_get(ext, alpn_first_proto, sizeof(alpn_first_proto)); + break; + case SUPPORTED_VERSIONS: + supported_versions=(char *)ssl_hello_supported_version_get(ext); + break; + default: + break; + } + } + + if(supported_versions==NULL) + { + supported_versions=(char *)ssl_hello_version_convert(shello->version); + } + + UT_string *ja4s_a; + utstring_new(ja4s_a); + utstring_printf(ja4s_a, + "t%s%02u%s_%04x_", + ((supported_versions==NULL) ? "00" : supported_versions), + ((utarray_len(shello->extensions->value) > 99) ? 99 : utarray_len(shello->extensions->value)), + ((alpn_first_proto_sz==0) ? "00" : alpn_first_proto), + ((shello->ciphersuites.value!=NULL) ? ntohs(*(unsigned short *)(shello->ciphersuites.value)) : 0) + ); + + UT_string *ja4s_c; + utstring_new(ja4s_c); + int32_t flag=SSL_FALSE; + for(uint32_t i=0; i<utarray_len(shello->extensions->value); i++) + { + struct ssl_l2tv *ext=(struct ssl_l2tv *)utarray_eltptr(shello->extensions->value, i); + if(ext==NULL || ssl_is_grease_value(ext->type)) + { + continue; + } + + if(ext->type==ALPN_EXT_TYPE || ext->type==SERVER_NAME_EXT_TYPE) + { + continue; + } + + utstring_printf(ja4s_c, "%s%04x", ((flag==SSL_FALSE) ? "" : ","), ext->type); + flag=SSL_TRUE; + } + + if(utstring_len(ja4s_c)>0) + { + unsigned char ja4s_c_sha256[SHA256_DIGEST_LENGTH]; + ja4_sha256(utstring_body(ja4s_c), utstring_len(ja4s_c), ja4s_c_sha256, sizeof(ja4s_c_sha256)); + utstring_printf(ja4s_a, "%02x%02x%02x%02x%02x%02x", ja4s_c_sha256[0], ja4s_c_sha256[1], ja4s_c_sha256[2], ja4s_c_sha256[3], ja4s_c_sha256[4], ja4s_c_sha256[5]); + } + else + { + utstring_printf(ja4s_a, "_000000000000"); + } + + shello->ja4s.value_sz=MIN(utstring_len(ja4s_a), sizeof(shello->ja4s)-1); + memcpy(shello->ja4s.value, utstring_body(ja4s_a), shello->ja4s.value_sz); + + utstring_free(ja4s_a); + utstring_free(ja4s_c); +} + int ssl_parse_new_session_ticket(struct ssl_new_session_ticket *new_session_ticket, char *payload, int payload_len) { int offset=0; @@ -869,6 +1312,7 @@ int ssl_parse_handshake(const struct streaminfo *a_tcp, struct ssl_runtime_conte } ssl_chello_ja3_generate(&chello); + ssl_chello_ja4_generate(&chello); ssl_call_plugins(a_tcp, ssl_context, (char *)(payload+offset), chello.total_len+CLIENT_HELLO_HDRLEN, SSL_CLIENT_HELLO_MASK, thread_seq, a_packet); offset+=(chello.total_len+CLIENT_HELLO_HDRLEN); if(chello.extensions!=NULL) @@ -899,6 +1343,7 @@ int ssl_parse_handshake(const struct streaminfo *a_tcp, struct ssl_runtime_conte } ssl_shello_ja3s_generate(&shello); + ssl_shello_ja4s_generate(&shello); ssl_call_plugins(a_tcp, ssl_context, (char *)(payload+offset), shello.total_len+SERVER_HELLO_HDRLEN, SSL_SERVER_HELLO_MASK, thread_seq, a_packet); offset+=(shello.total_len+SERVER_HELLO_HDRLEN); if(shello.extensions!=NULL) diff --git a/test/CMakeLists.txt b/test/CMakeLists.txt index 124fe18..c379920 100644 --- a/test/CMakeLists.txt +++ b/test/CMakeLists.txt @@ -5,6 +5,7 @@ project(${lib_name}_test) include(ExternalProject) #### Protoco_test_run +include_directories(${CMAKE_SOURCE_DIR}/src/) ExternalProject_Add(ProtoTest PREFIX ProtoTest URL ${CMAKE_CURRENT_SOURCE_DIR}/test_protocol_run.zip diff --git a/test/pcap/bug/ssl_bug_result.json b/test/pcap/bug/ssl_bug_result.json index fabe97f..394712c 100644 --- a/test/pcap/bug/ssl_bug_result.json +++ b/test/pcap/bug/ssl_bug_result.json @@ -1,24 +1,25 @@ [ { - "Tuple4": "192.168.50.52.17434>15.197.193.217.443", - "ssl_sni": "match.adsrvr.org", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "8d2a028aa94425f76ced7826b1f39039", - "ssl_cert_version": "v3", - "ssl_cert_Issuer": "GlobalSign GCC R3 DV TLS CA 2020;GlobalSign nv-sa;;;;;BE", - "ssl_cert_IssuerCN": "GlobalSign GCC R3 DV TLS CA 2020", - "ssl_cert_IssuerO": "GlobalSign nv-sa", - "ssl_cert_IssuerC": "BE", - "ssl_cert_Sub": "*.adsrvr.org;;;;;;", - "ssl_cert_SubCN": "*.adsrvr.org", - "ssl_cert_SubCN": "*.adsrvr.org", - "ssl_cert_SubAltName": "*.adsrvr.org;adsrvr.org", - "ssl_cert_SerialNum": "0x2ddaa6f359d4ce458fe983f1", - "ssl_cert_AgID": "1.2.840.113549.1.1.11", - "ssl_cert_From": "220331203750Z", - "ssl_cert_To": "230502203749Z", - "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", - "name": "SSL_RESULT_1" + "Tuple4": "192.168.50.52.17434>15.197.193.217.443", + "ssl_sni": "match.adsrvr.org", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "ssl_ja3s_hash": "8d2a028aa94425f76ced7826b1f39039", + "ssl_ja4s_hash": "t1204h2_c02f_bec8bdbaef8a", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "GlobalSign GCC R3 DV TLS CA 2020;GlobalSign nv-sa;;;;;BE", + "ssl_cert_IssuerCN": "GlobalSign GCC R3 DV TLS CA 2020", + "ssl_cert_IssuerO": "GlobalSign nv-sa", + "ssl_cert_IssuerC": "BE", + "ssl_cert_Sub": "*.adsrvr.org;;;;;;", + "ssl_cert_SubCN": "*.adsrvr.org", + "ssl_cert_SubAltName": "*.adsrvr.org;adsrvr.org", + "ssl_cert_SerialNum": "0x2ddaa6f359d4ce458fe983f1", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "220331203750Z", + "ssl_cert_To": "230502203749Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", + "name": "SSL_RESULT_1" } -] +]
\ No newline at end of file diff --git a/test/pcap/client_hello_fragment/ssl_client_hello_fragment_result.json b/test/pcap/client_hello_fragment/ssl_client_hello_fragment_result.json index b392285..45b9dd6 100644 --- a/test/pcap/client_hello_fragment/ssl_client_hello_fragment_result.json +++ b/test/pcap/client_hello_fragment/ssl_client_hello_fragment_result.json @@ -4,7 +4,9 @@ "ssl_sni": "sync.targeting.unrulymedia.com", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "bc93a67ef4492974195865dc0262e65e", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", "ssl_ja3s_hash": "b898351eb5e266aefd3723d466935494", + "ssl_ja4s_hash": "t1205h2_c02f_bec8bdbaef8a", "ssl_cert_version": "v3", "ssl_cert_Issuer": "Sectigo RSA Domain Validation Secure Server CA;Sectigo Limited;;Salford;;Greater Manchester;GB", "ssl_cert_IssuerCN": "Sectigo RSA Domain Validation Secure Server CA", @@ -27,7 +29,9 @@ "ssl_sni": "www.missionsports.org", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "a69708a64f853c3bcc214c2c5faf84f3", + "ssl_ja4_hash": "t12d2010h2_2a284e3b0c56_f05fdf8c38a9", "ssl_ja3s_hash": "10a2ad147a870ef37af153dea9fe4dd3", + "ssl_ja4s_hash": "t1205h1_c02b_cbb8871a0652", "ssl_cert_version": "v3", "ssl_cert_Issuer": "DigiCert TLS RSA SHA256 2020 CA1;DigiCert Inc;;;;;US", "ssl_cert_IssuerCN": "DigiCert TLS RSA SHA256 2020 CA1", @@ -53,6 +57,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "c3db97da3b30171e5cf9de314584b555", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_02713d6af862", "name": "SSL_RESULT_3" } ]
\ No newline at end of file diff --git a/test/pcap/close_contains_payload/ssl_close_contains_payload_result.json b/test/pcap/close_contains_payload/ssl_close_contains_payload_result.json index 88f77d9..339fe16 100644 --- a/test/pcap/close_contains_payload/ssl_close_contains_payload_result.json +++ b/test/pcap/close_contains_payload/ssl_close_contains_payload_result.json @@ -1,26 +1,30 @@ -[{ - "Tuple4": "192.168.50.28.63669>18.163.185.193.443", - "ssl_sni": "www.firefox.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "45b1a0eca9605cd8789cd7e1a5ccd9b0", - "ssl_ja3s_hash": "9a1de6823a92d66172ce93d309e73e4e", - "ssl_cert_version": "v3", - "ssl_cert_Issuer": "DigiCert SHA2 Secure Server CA;DigiCert Inc;;;;;US", - "ssl_cert_IssuerCN": "DigiCert SHA2 Secure Server CA", - "ssl_cert_IssuerO": "DigiCert Inc", - "ssl_cert_IssuerC": "US", - "ssl_cert_Sub": "redirect-san.mozilla.org;Mozilla Corporation;WebOps;Mountain View;;California;US", - "ssl_cert_SubCN": "redirect-san.mozilla.org", - "ssl_cert_SubO": "Mozilla Corporation", - "ssl_cert_SubC": "US", - "ssl_cert_SubP": "California", - "ssl_cert_SubL": "Mountain View", - "ssl_cert_SubU": "WebOps", - "ssl_cert_SubAltName": "leandatapractices.org;leandatapractices.com;mozilla-podcasts.org;mozilla.com;gv.dev;getfirefox.com;geckoview.dev;firefoxquantum.com;firefox.com;taskcluster.net;contributejson.org;www.firefox.com;masterfirefoxos.mozilla.org;mobilepartners.mozilla.org;www.leandatapractices.org;www.leandatapractices.com;www.getfirefox.com;mozilla.org.uk;webwewant.mozilla.org;thehub.mozilla.com;nightly.mozilla.org;pontoon.mozillalabs.com;videos.mozilla.org;videos-cdn.mozilla.net;treestatus.mozilla.org;techspeakers.mozilla.org;redirect-san.mozilla.org;input.mozilla.com;join.mozilla.org;content.mozilla.org;activations.mozilla.org;addons.mozilla.com;airmo.mozilla.org;ask.mozilla.org;aurora.mozilla.org;beta.mozilla.org;careers.mozilla.com;designlanguage.mozilla.org;input.mozilla.org;dnt.mozilla.org;events.mozilla.org;forums.mozilla.org;friends.mozilla.org;git.mozilla.org;hub.mozilla.com;hub.mozilla.org;activations.mozilla.com;www.mozilla.com", - "ssl_cert_SerialNum": "0x019d2b994ec99445c735d2a6d739e43a", - "ssl_cert_AgID": "1.2.840.113549.1.1.11", - "ssl_cert_From": "200406000000Z", - "ssl_cert_To": "210414120000Z", - "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", - "name": "SSL_RESULT_1" -}] +[ + { + "Tuple4": "192.168.50.28.63669>18.163.185.193.443", + "ssl_sni": "www.firefox.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "45b1a0eca9605cd8789cd7e1a5ccd9b0", + "ssl_ja4_hash": "t12d1404h2_14359bf1019b_c3d7aa4563b5", + "ssl_ja3s_hash": "9a1de6823a92d66172ce93d309e73e4e", + "ssl_ja4s_hash": "t1203h2_eff8_344b4dce5a52", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "DigiCert SHA2 Secure Server CA;DigiCert Inc;;;;;US", + "ssl_cert_IssuerCN": "DigiCert SHA2 Secure Server CA", + "ssl_cert_IssuerO": "DigiCert Inc", + "ssl_cert_IssuerC": "US", + "ssl_cert_Sub": "redirect-san.mozilla.org;Mozilla Corporation;WebOps;Mountain View;;California;US", + "ssl_cert_SubCN": "redirect-san.mozilla.org", + "ssl_cert_SubO": "Mozilla Corporation", + "ssl_cert_SubC": "US", + "ssl_cert_SubP": "California", + "ssl_cert_SubL": "Mountain View", + "ssl_cert_SubU": "WebOps", + "ssl_cert_SubAltName": "leandatapractices.org;leandatapractices.com;mozilla-podcasts.org;mozilla.com;gv.dev;getfirefox.com;geckoview.dev;firefoxquantum.com;firefox.com;taskcluster.net;contributejson.org;www.firefox.com;masterfirefoxos.mozilla.org;mobilepartners.mozilla.org;www.leandatapractices.org;www.leandatapractices.com;www.getfirefox.com;mozilla.org.uk;webwewant.mozilla.org;thehub.mozilla.com;nightly.mozilla.org;pontoon.mozillalabs.com;videos.mozilla.org;videos-cdn.mozilla.net;treestatus.mozilla.org;techspeakers.mozilla.org;redirect-san.mozilla.org;input.mozilla.com;join.mozilla.org;content.mozilla.org;activations.mozilla.org;addons.mozilla.com;airmo.mozilla.org;ask.mozilla.org;aurora.mozilla.org;beta.mozilla.org;careers.mozilla.com;designlanguage.mozilla.org;input.mozilla.org;dnt.mozilla.org;events.mozilla.org;forums.mozilla.org;friends.mozilla.org;git.mozilla.org;hub.mozilla.com;hub.mozilla.org;activations.mozilla.com;www.mozilla.com", + "ssl_cert_SerialNum": "0x019d2b994ec99445c735d2a6d739e43a", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "200406000000Z", + "ssl_cert_To": "210414120000Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", + "name": "SSL_RESULT_1" + } +]
\ No newline at end of file diff --git a/test/pcap/e21/ssl_e21_target_result.json b/test/pcap/e21/ssl_e21_target_result.json index ff62115..ab528b1 100644 --- a/test/pcap/e21/ssl_e21_target_result.json +++ b/test/pcap/e21/ssl_e21_target_result.json @@ -1,501 +1,568 @@ -[{ - "Tuple4": "10.10.10.162.55173>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_1" -}, -{ - "Tuple4": "10.10.10.162.55174>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_2" -}, -{ - "Tuple4": "10.10.10.162.55176>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_3" -}, -{ - "Tuple4": "10.10.10.162.55177>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_4" -}, -{ - "Tuple4": "10.10.10.162.55178>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_5" -}, -{ - "Tuple4": "10.10.10.162.55179>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_6" -}, -{ - "Tuple4": "10.10.10.162.55180>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_7" -}, -{ - "Tuple4": "10.10.10.162.55181>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_8" -}, -{ - "Tuple4": "10.10.10.162.55182>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_9" -}, -{ - "Tuple4": "10.10.10.162.55184>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_10" -}, -{ - "Tuple4": "10.10.10.162.55214>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_11" -}, -{ - "Tuple4": "10.10.10.162.55215>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_12" -}, -{ - "Tuple4": "10.10.10.162.55183>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "16c0b3e6a7b8173c16d944cfeaeee9cf", - "ssl_cert_version": "v3", - "ssl_cert_Issuer": "GlobalSign Atlas R3 OV TLS CA H2 2021;GlobalSign nv-sa;;;;;BE", - "ssl_cert_IssuerCN": "GlobalSign Atlas R3 OV TLS CA H2 2021", - "ssl_cert_IssuerO": "GlobalSign nv-sa", - "ssl_cert_IssuerC": "BE", - "ssl_cert_Sub": "sites.target.com;Target Corporation;;Minneapolis;;Minnesota;US", - "ssl_cert_SubCN": "sites.target.com", - "ssl_cert_SubO": "Target Corporation", - "ssl_cert_SubC": "US", - "ssl_cert_SubP": "Minnesota", - "ssl_cert_SubL": "Minneapolis", - "ssl_cert_SubCN": "sites.target.com", - "ssl_cert_SubAltName": "sites.target.com;affiliate.target.com;android.studioconnect.live;api.studioconnect.live;apollo-metrics.target.com;assethub.partnersonline.com;assethub.target.com;awesomeshop.target.com;bex.partnersonline.com;bex.target.com;cartster.target.com;cartwheel.target.com;cartwheelws-secure.target.com;circle.target.com;connect.roundel.com;connectedcommerce.target.com;corporate.target.com;developer.target.com;dojo.target.com;doppler.partnersonline.com;elevate.target.com;extgargantua.partnersonline.com;factorial.partnersonline.com;finds.target.com;gql.studioconnect.live;greenfield.partnersonline.com;greenfield.target.com;hrocdocrequest.target.com;iccon.target.com;incubator.target.com;india.target.com;ios.studioconnect.live;jira.target.com;launchpad.partnersonline.com;launchpad.target.com;leads.studioconnect.live;m.target.com;marketinghub.target.com;mercury.partnersonline.com;mickra.target.com;mickradashboard.target.com;mvs.partnersonline.com;mytime.target.com;nic.target;openhouse.target.com;opensource.target.com;osmosis.partnersonline.com;partnersonline.com;pcn.partnersonline.com;peg.partnersonline.com;photosubmission.target.com;pid.partnersonline.com;plus.target.com;pmworkorderadmin.partnersonline.com;poladmin.partnersonline.com;pop.partnersonline.com;qmp.partnersonline.com;qr.target.com;r2d2.target.com;rdmplus.target.com;recognize.target.com;redcard.target.com;redirect.studioconnect.live;rik.roundel.com;roundel.com;rubix.partnersonline.com;rubix.target.com;security.target.com;servicetech.target.com;sm.partnersonline.com;spark.partnersonline.com;spark.target.com;studioconnect.live;stylehub.target.com;synergy.partnersonline.com;target.com;targetmedianetwork.target.com;targetopenhouse.com;tepagent.target.com;tgt-files.target.com;tgtdriver.partnersonline.com;ti-event-prod.target.com;tiam.target.com;tiiam.target.com;tvi.partnersonline.com;viewpoint.target.com;weeklyad.target.com;www.partnersonline.com;www.roundel.com;www.target.com;www.targetopenhouse.com", - "ssl_cert_SerialNum": "0x012ede33fc9283773396e9b1ff995262", - "ssl_cert_AgID": "1.2.840.113549.1.1.11", - "ssl_cert_From": "210928164609Z", - "ssl_cert_To": "221030164608Z", - "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", - "name": "SSL_RESULT_13" -}, -{ - "Tuple4": "10.10.10.162.55242>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "16c0b3e6a7b8173c16d944cfeaeee9cf", - "ssl_cert_version": "v3", - "ssl_cert_Issuer": "GlobalSign Atlas R3 OV TLS CA H2 2021;GlobalSign nv-sa;;;;;BE", - "ssl_cert_IssuerCN": "GlobalSign Atlas R3 OV TLS CA H2 2021", - "ssl_cert_IssuerO": "GlobalSign nv-sa", - "ssl_cert_IssuerC": "BE", - "ssl_cert_Sub": "sites.target.com;Target Corporation;;Minneapolis;;Minnesota;US", - "ssl_cert_SubCN": "sites.target.com", - "ssl_cert_SubO": "Target Corporation", - "ssl_cert_SubC": "US", - "ssl_cert_SubP": "Minnesota", - "ssl_cert_SubL": "Minneapolis", - "ssl_cert_SubCN": "sites.target.com", - "ssl_cert_SubAltName": "sites.target.com;affiliate.target.com;android.studioconnect.live;api.studioconnect.live;apollo-metrics.target.com;assethub.partnersonline.com;assethub.target.com;awesomeshop.target.com;bex.partnersonline.com;bex.target.com;cartster.target.com;cartwheel.target.com;cartwheelws-secure.target.com;circle.target.com;connect.roundel.com;connectedcommerce.target.com;corporate.target.com;developer.target.com;dojo.target.com;doppler.partnersonline.com;elevate.target.com;extgargantua.partnersonline.com;factorial.partnersonline.com;finds.target.com;gql.studioconnect.live;greenfield.partnersonline.com;greenfield.target.com;hrocdocrequest.target.com;iccon.target.com;incubator.target.com;india.target.com;ios.studioconnect.live;jira.target.com;launchpad.partnersonline.com;launchpad.target.com;leads.studioconnect.live;m.target.com;marketinghub.target.com;mercury.partnersonline.com;mickra.target.com;mickradashboard.target.com;mvs.partnersonline.com;mytime.target.com;nic.target;openhouse.target.com;opensource.target.com;osmosis.partnersonline.com;partnersonline.com;pcn.partnersonline.com;peg.partnersonline.com;photosubmission.target.com;pid.partnersonline.com;plus.target.com;pmworkorderadmin.partnersonline.com;poladmin.partnersonline.com;pop.partnersonline.com;qmp.partnersonline.com;qr.target.com;r2d2.target.com;rdmplus.target.com;recognize.target.com;redcard.target.com;redirect.studioconnect.live;rik.roundel.com;roundel.com;rubix.partnersonline.com;rubix.target.com;security.target.com;servicetech.target.com;sm.partnersonline.com;spark.partnersonline.com;spark.target.com;studioconnect.live;stylehub.target.com;synergy.partnersonline.com;target.com;targetmedianetwork.target.com;targetopenhouse.com;tepagent.target.com;tgt-files.target.com;tgtdriver.partnersonline.com;ti-event-prod.target.com;tiam.target.com;tiiam.target.com;tvi.partnersonline.com;viewpoint.target.com;weeklyad.target.com;www.partnersonline.com;www.roundel.com;www.target.com;www.targetopenhouse.com", - "ssl_cert_SerialNum": "0x012ede33fc9283773396e9b1ff995262", - "ssl_cert_AgID": "1.2.840.113549.1.1.11", - "ssl_cert_From": "210928164609Z", - "ssl_cert_To": "221030164608Z", - "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", - "name": "SSL_RESULT_14" -}, -{ - "Tuple4": "10.10.10.162.55241>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_15" -}, -{ - "Tuple4": "10.10.10.162.55274>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_16" -}, -{ - "Tuple4": "10.10.10.162.55273>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_17" -}, -{ - "Tuple4": "10.10.10.162.55279>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_18" -}, -{ - "Tuple4": "10.10.10.162.55282>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_19" -}, -{ - "Tuple4": "10.10.10.162.55283>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_20" -}, -{ - "Tuple4": "10.10.10.162.55284>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_21" -}, -{ - "Tuple4": "10.10.10.162.55285>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_22" -}, -{ - "Tuple4": "10.10.10.162.55286>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_23" -}, -{ - "Tuple4": "10.10.10.162.55287>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_24" -}, -{ - "Tuple4": "10.10.10.162.55288>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_25" -}, -{ - "Tuple4": "10.10.10.162.55289>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_26" -}, -{ - "Tuple4": "10.10.10.162.55296>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_27" -}, -{ - "Tuple4": "10.10.10.162.55297>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_28" -}, -{ - "Tuple4": "10.10.10.162.55298>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_29" -}, -{ - "Tuple4": "10.10.10.162.55299>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_30" -}, -{ - "Tuple4": "10.10.10.162.55300>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_31" -}, -{ - "Tuple4": "10.10.10.162.55301>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_32" -}, -{ - "Tuple4": "10.10.10.162.55306>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_33" -}, -{ - "Tuple4": "10.10.10.162.55307>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_34" -}, -{ - "Tuple4": "10.10.10.162.55308>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_35" -}, -{ - "Tuple4": "10.10.10.162.55309>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_36" -}, -{ - "Tuple4": "10.10.10.162.55311>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_37" -}, -{ - "Tuple4": "10.10.10.162.55312>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_38" -}, -{ - "Tuple4": "10.10.10.162.55321>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_39" -}, -{ - "Tuple4": "10.10.10.162.55322>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_40" -}, -{ - "Tuple4": "10.10.10.162.55323>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_41" -}, -{ - "Tuple4": "10.10.10.162.55324>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_42" -}, -{ - "Tuple4": "10.10.10.162.55325>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_43" -}, -{ - "Tuple4": "10.10.10.162.55326>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_44" -}, -{ - "Tuple4": "10.10.10.162.55327>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_45" -}, -{ - "Tuple4": "10.10.10.162.55328>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_46" -}, -{ - "Tuple4": "10.10.10.162.55330>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_47" -}, -{ - "Tuple4": "10.10.10.162.55331>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_48" -}, -{ - "Tuple4": "10.10.10.162.55332>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_49" -}, -{ - "Tuple4": "10.10.10.162.55334>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_50" -}, -{ - "Tuple4": "10.10.10.162.55336>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_51" -}, -{ - "Tuple4": "10.10.10.162.55337>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_52" -}, -{ - "Tuple4": "10.10.10.162.55338>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_53" -}, -{ - "Tuple4": "10.10.10.162.55343>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_54" -}, -{ - "Tuple4": "10.10.10.162.55344>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_55" -}, -{ - "Tuple4": "10.10.10.162.55345>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_56" -}, -{ - "Tuple4": "10.10.10.162.55346>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_57" -}, -{ - "Tuple4": "10.10.10.162.55349>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_58" -}, -{ - "Tuple4": "10.10.10.162.55348>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_59" -}, -{ - "Tuple4": "10.10.10.162.55352>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_60" -}, -{ - "Tuple4": "10.10.10.162.55353>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_61" -}, -{ - "Tuple4": "10.10.10.162.55356>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_62" -}, -{ - "Tuple4": "10.10.10.162.55357>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_63" -}, -{ - "Tuple4": "10.10.10.162.55359>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_64" -}, -{ - "Tuple4": "10.10.10.162.55358>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_65" -}, -{ - "Tuple4": "10.10.10.162.55364>151.101.2.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_66" -} -] +[ + { + "Tuple4": "10.10.10.162.55173>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_1" + }, + { + "Tuple4": "10.10.10.162.55174>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_2" + }, + { + "Tuple4": "10.10.10.162.55176>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_3" + }, + { + "Tuple4": "10.10.10.162.55177>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_4" + }, + { + "Tuple4": "10.10.10.162.55178>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_5" + }, + { + "Tuple4": "10.10.10.162.55179>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_6" + }, + { + "Tuple4": "10.10.10.162.55180>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_7" + }, + { + "Tuple4": "10.10.10.162.55181>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_8" + }, + { + "Tuple4": "10.10.10.162.55182>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_9" + }, + { + "Tuple4": "10.10.10.162.55184>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_10" + }, + { + "Tuple4": "10.10.10.162.55214>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_11" + }, + { + "Tuple4": "10.10.10.162.55215>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_12" + }, + { + "Tuple4": "10.10.10.162.55183>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "ssl_ja3s_hash": "16c0b3e6a7b8173c16d944cfeaeee9cf", + "ssl_ja4s_hash": "t1207h2_c02f_71e9615128b3", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "GlobalSign Atlas R3 OV TLS CA H2 2021;GlobalSign nv-sa;;;;;BE", + "ssl_cert_IssuerCN": "GlobalSign Atlas R3 OV TLS CA H2 2021", + "ssl_cert_IssuerO": "GlobalSign nv-sa", + "ssl_cert_IssuerC": "BE", + "ssl_cert_Sub": "sites.target.com;Target Corporation;;Minneapolis;;Minnesota;US", + "ssl_cert_SubO": "Target Corporation", + "ssl_cert_SubC": "US", + "ssl_cert_SubP": "Minnesota", + "ssl_cert_SubL": "Minneapolis", + "ssl_cert_SubCN": "sites.target.com", + "ssl_cert_SubAltName": "sites.target.com;affiliate.target.com;android.studioconnect.live;api.studioconnect.live;apollo-metrics.target.com;assethub.partnersonline.com;assethub.target.com;awesomeshop.target.com;bex.partnersonline.com;bex.target.com;cartster.target.com;cartwheel.target.com;cartwheelws-secure.target.com;circle.target.com;connect.roundel.com;connectedcommerce.target.com;corporate.target.com;developer.target.com;dojo.target.com;doppler.partnersonline.com;elevate.target.com;extgargantua.partnersonline.com;factorial.partnersonline.com;finds.target.com;gql.studioconnect.live;greenfield.partnersonline.com;greenfield.target.com;hrocdocrequest.target.com;iccon.target.com;incubator.target.com;india.target.com;ios.studioconnect.live;jira.target.com;launchpad.partnersonline.com;launchpad.target.com;leads.studioconnect.live;m.target.com;marketinghub.target.com;mercury.partnersonline.com;mickra.target.com;mickradashboard.target.com;mvs.partnersonline.com;mytime.target.com;nic.target;openhouse.target.com;opensource.target.com;osmosis.partnersonline.com;partnersonline.com;pcn.partnersonline.com;peg.partnersonline.com;photosubmission.target.com;pid.partnersonline.com;plus.target.com;pmworkorderadmin.partnersonline.com;poladmin.partnersonline.com;pop.partnersonline.com;qmp.partnersonline.com;qr.target.com;r2d2.target.com;rdmplus.target.com;recognize.target.com;redcard.target.com;redirect.studioconnect.live;rik.roundel.com;roundel.com;rubix.partnersonline.com;rubix.target.com;security.target.com;servicetech.target.com;sm.partnersonline.com;spark.partnersonline.com;spark.target.com;studioconnect.live;stylehub.target.com;synergy.partnersonline.com;target.com;targetmedianetwork.target.com;targetopenhouse.com;tepagent.target.com;tgt-files.target.com;tgtdriver.partnersonline.com;ti-event-prod.target.com;tiam.target.com;tiiam.target.com;tvi.partnersonline.com;viewpoint.target.com;weeklyad.target.com;www.partnersonline.com;www.roundel.com;www.target.com;www.targetopenhouse.com", + "ssl_cert_SerialNum": "0x012ede33fc9283773396e9b1ff995262", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "210928164609Z", + "ssl_cert_To": "221030164608Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", + "name": "SSL_RESULT_13" + }, + { + "Tuple4": "10.10.10.162.55242>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "ssl_ja3s_hash": "16c0b3e6a7b8173c16d944cfeaeee9cf", + "ssl_ja4s_hash": "t1207h2_c02f_71e9615128b3", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "GlobalSign Atlas R3 OV TLS CA H2 2021;GlobalSign nv-sa;;;;;BE", + "ssl_cert_IssuerCN": "GlobalSign Atlas R3 OV TLS CA H2 2021", + "ssl_cert_IssuerO": "GlobalSign nv-sa", + "ssl_cert_IssuerC": "BE", + "ssl_cert_Sub": "sites.target.com;Target Corporation;;Minneapolis;;Minnesota;US", + "ssl_cert_SubO": "Target Corporation", + "ssl_cert_SubC": "US", + "ssl_cert_SubP": "Minnesota", + "ssl_cert_SubL": "Minneapolis", + "ssl_cert_SubCN": "sites.target.com", + "ssl_cert_SubAltName": "sites.target.com;affiliate.target.com;android.studioconnect.live;api.studioconnect.live;apollo-metrics.target.com;assethub.partnersonline.com;assethub.target.com;awesomeshop.target.com;bex.partnersonline.com;bex.target.com;cartster.target.com;cartwheel.target.com;cartwheelws-secure.target.com;circle.target.com;connect.roundel.com;connectedcommerce.target.com;corporate.target.com;developer.target.com;dojo.target.com;doppler.partnersonline.com;elevate.target.com;extgargantua.partnersonline.com;factorial.partnersonline.com;finds.target.com;gql.studioconnect.live;greenfield.partnersonline.com;greenfield.target.com;hrocdocrequest.target.com;iccon.target.com;incubator.target.com;india.target.com;ios.studioconnect.live;jira.target.com;launchpad.partnersonline.com;launchpad.target.com;leads.studioconnect.live;m.target.com;marketinghub.target.com;mercury.partnersonline.com;mickra.target.com;mickradashboard.target.com;mvs.partnersonline.com;mytime.target.com;nic.target;openhouse.target.com;opensource.target.com;osmosis.partnersonline.com;partnersonline.com;pcn.partnersonline.com;peg.partnersonline.com;photosubmission.target.com;pid.partnersonline.com;plus.target.com;pmworkorderadmin.partnersonline.com;poladmin.partnersonline.com;pop.partnersonline.com;qmp.partnersonline.com;qr.target.com;r2d2.target.com;rdmplus.target.com;recognize.target.com;redcard.target.com;redirect.studioconnect.live;rik.roundel.com;roundel.com;rubix.partnersonline.com;rubix.target.com;security.target.com;servicetech.target.com;sm.partnersonline.com;spark.partnersonline.com;spark.target.com;studioconnect.live;stylehub.target.com;synergy.partnersonline.com;target.com;targetmedianetwork.target.com;targetopenhouse.com;tepagent.target.com;tgt-files.target.com;tgtdriver.partnersonline.com;ti-event-prod.target.com;tiam.target.com;tiiam.target.com;tvi.partnersonline.com;viewpoint.target.com;weeklyad.target.com;www.partnersonline.com;www.roundel.com;www.target.com;www.targetopenhouse.com", + "ssl_cert_SerialNum": "0x012ede33fc9283773396e9b1ff995262", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "210928164609Z", + "ssl_cert_To": "221030164608Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", + "name": "SSL_RESULT_14" + }, + { + "Tuple4": "10.10.10.162.55241>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_15" + }, + { + "Tuple4": "10.10.10.162.55274>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_16" + }, + { + "Tuple4": "10.10.10.162.55273>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_17" + }, + { + "Tuple4": "10.10.10.162.55279>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_18" + }, + { + "Tuple4": "10.10.10.162.55282>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_19" + }, + { + "Tuple4": "10.10.10.162.55283>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_20" + }, + { + "Tuple4": "10.10.10.162.55284>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_21" + }, + { + "Tuple4": "10.10.10.162.55285>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_22" + }, + { + "Tuple4": "10.10.10.162.55286>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_23" + }, + { + "Tuple4": "10.10.10.162.55287>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_24" + }, + { + "Tuple4": "10.10.10.162.55288>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_25" + }, + { + "Tuple4": "10.10.10.162.55289>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_26" + }, + { + "Tuple4": "10.10.10.162.55296>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_27" + }, + { + "Tuple4": "10.10.10.162.55297>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_28" + }, + { + "Tuple4": "10.10.10.162.55298>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_29" + }, + { + "Tuple4": "10.10.10.162.55299>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_30" + }, + { + "Tuple4": "10.10.10.162.55300>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_31" + }, + { + "Tuple4": "10.10.10.162.55301>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_32" + }, + { + "Tuple4": "10.10.10.162.55306>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_33" + }, + { + "Tuple4": "10.10.10.162.55307>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_34" + }, + { + "Tuple4": "10.10.10.162.55308>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_35" + }, + { + "Tuple4": "10.10.10.162.55309>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_36" + }, + { + "Tuple4": "10.10.10.162.55311>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_37" + }, + { + "Tuple4": "10.10.10.162.55312>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_38" + }, + { + "Tuple4": "10.10.10.162.55321>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_39" + }, + { + "Tuple4": "10.10.10.162.55322>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_40" + }, + { + "Tuple4": "10.10.10.162.55323>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_41" + }, + { + "Tuple4": "10.10.10.162.55324>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_42" + }, + { + "Tuple4": "10.10.10.162.55325>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_43" + }, + { + "Tuple4": "10.10.10.162.55326>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_44" + }, + { + "Tuple4": "10.10.10.162.55327>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_45" + }, + { + "Tuple4": "10.10.10.162.55328>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_46" + }, + { + "Tuple4": "10.10.10.162.55330>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_47" + }, + { + "Tuple4": "10.10.10.162.55331>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_48" + }, + { + "Tuple4": "10.10.10.162.55332>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_49" + }, + { + "Tuple4": "10.10.10.162.55334>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_50" + }, + { + "Tuple4": "10.10.10.162.55336>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_51" + }, + { + "Tuple4": "10.10.10.162.55337>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_52" + }, + { + "Tuple4": "10.10.10.162.55338>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_53" + }, + { + "Tuple4": "10.10.10.162.55343>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_54" + }, + { + "Tuple4": "10.10.10.162.55344>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_55" + }, + { + "Tuple4": "10.10.10.162.55345>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_56" + }, + { + "Tuple4": "10.10.10.162.55346>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_57" + }, + { + "Tuple4": "10.10.10.162.55349>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_58" + }, + { + "Tuple4": "10.10.10.162.55348>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_59" + }, + { + "Tuple4": "10.10.10.162.55352>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_60" + }, + { + "Tuple4": "10.10.10.162.55353>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_61" + }, + { + "Tuple4": "10.10.10.162.55356>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_62" + }, + { + "Tuple4": "10.10.10.162.55357>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_63" + }, + { + "Tuple4": "10.10.10.162.55359>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_64" + }, + { + "Tuple4": "10.10.10.162.55358>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_65" + }, + { + "Tuple4": "10.10.10.162.55364>151.101.2.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_66" + } +]
\ No newline at end of file diff --git a/test/pcap/extensions_exceed_16/extensions_exceed_16_result.json b/test/pcap/extensions_exceed_16/extensions_exceed_16_result.json index c5416e0..c9c3f44 100644 --- a/test/pcap/extensions_exceed_16/extensions_exceed_16_result.json +++ b/test/pcap/extensions_exceed_16/extensions_exceed_16_result.json @@ -5,6 +5,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "afa0d02228072fc4b02a7772a668c64a", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_02713d6af862", "name": "SSL_RESULT_1" } ]
\ No newline at end of file diff --git a/test/pcap/multiple_handshake/ssl_multiple_handshake_result.json b/test/pcap/multiple_handshake/ssl_multiple_handshake_result.json index 8d46be2..31f7096 100644 --- a/test/pcap/multiple_handshake/ssl_multiple_handshake_result.json +++ b/test/pcap/multiple_handshake/ssl_multiple_handshake_result.json @@ -1,21 +1,25 @@ -[{ - "Tuple4": "192.168.32.27.52705>202.89.233.101.443", - "ssl_sni": "cn.bing.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "67bfe5d15ae567fb35fd7837f0116eec", - "ssl_cert_version": "v3", - "ssl_cert_Issuer": "Microsoft RSA TLS CA 02;Microsoft Corporation;;;;;US", - "ssl_cert_IssuerCN": "Microsoft RSA TLS CA 02", - "ssl_cert_IssuerO": "Microsoft Corporation", - "ssl_cert_IssuerC": "US", - "ssl_cert_Sub": "www.bing.com;;;;;;", - "ssl_cert_SubCN": "www.bing.com", - "ssl_cert_SubAltName": "www.bing.com;dict.bing.com.cn;*.platform.bing.com;*.bing.com;bing.com;ieonline.microsoft.com;*.windowssearch.com;cn.ieonline.microsoft.com;*.origin.bing.com;*.mm.bing.net;*.api.bing.com;ecn.dev.virtualearth.net;*.cn.bing.net;*.cn.bing.com;ssl-api.bing.com;ssl-api.bing.net;*.api.bing.net;*.bingapis.com;bingsandbox.com;feedback.microsoft.com;insertmedia.bing.office.net;r.bat.bing.com;*.r.bat.bing.com;*.dict.bing.com.cn;*.dict.bing.com;*.ssl.bing.com;*.appex.bing.com;*.platform.cn.bing.com;wp.m.bing.com;*.m.bing.com;global.bing.com;windowssearch.com;search.msn.com;*.bingsandbox.com;*.api.tiles.ditu.live.com;*.ditu.live.com;*.t0.tiles.ditu.live.com;*.t1.tiles.ditu.live.com;*.t2.tiles.ditu.live.com;*.t3.tiles.ditu.live.com;*.tiles.ditu.live.com;3d.live.com;api.search.live.com;beta.search.live.com;cnweb.search.live.com;dev.live.com;ditu.live.com;farecast.live.com;image.live.com;images.live.com;local.live.com.au;localsearch.live.com;ls4d.search.live.com;mail.live.com;mapindia.live.com;local.live.com;maps.live.com;maps.live.com.au;mindia.live.com;news.live.com;origin.cnweb.search.live.com;preview.local.live.com;search.live.com;test.maps.live.com;video.live.com;videos.live.com;virtualearth.live.com;wap.live.com;webmaster.live.com;webmasters.live.com;www.local.live.com.au;www.maps.live.com.au", - "ssl_cert_SerialNum": "0x7f0012e261129541195fac1a6000000012e261", - "ssl_cert_AgID": "1.2.840.113549.1.1.11", - "ssl_cert_From": "210706015313Z", - "ssl_cert_To": "220106015313Z", - "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", - "name": "SSL_RESULT_1" -}] +[ + { + "Tuple4": "192.168.32.27.52705>202.89.233.101.443", + "ssl_sni": "cn.bing.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "ssl_ja3s_hash": "67bfe5d15ae567fb35fd7837f0116eec", + "ssl_ja4s_hash": "t1204h2_c030_09f674154ab3", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "Microsoft RSA TLS CA 02;Microsoft Corporation;;;;;US", + "ssl_cert_IssuerCN": "Microsoft RSA TLS CA 02", + "ssl_cert_IssuerO": "Microsoft Corporation", + "ssl_cert_IssuerC": "US", + "ssl_cert_Sub": "www.bing.com;;;;;;", + "ssl_cert_SubCN": "www.bing.com", + "ssl_cert_SubAltName": "www.bing.com;dict.bing.com.cn;*.platform.bing.com;*.bing.com;bing.com;ieonline.microsoft.com;*.windowssearch.com;cn.ieonline.microsoft.com;*.origin.bing.com;*.mm.bing.net;*.api.bing.com;ecn.dev.virtualearth.net;*.cn.bing.net;*.cn.bing.com;ssl-api.bing.com;ssl-api.bing.net;*.api.bing.net;*.bingapis.com;bingsandbox.com;feedback.microsoft.com;insertmedia.bing.office.net;r.bat.bing.com;*.r.bat.bing.com;*.dict.bing.com.cn;*.dict.bing.com;*.ssl.bing.com;*.appex.bing.com;*.platform.cn.bing.com;wp.m.bing.com;*.m.bing.com;global.bing.com;windowssearch.com;search.msn.com;*.bingsandbox.com;*.api.tiles.ditu.live.com;*.ditu.live.com;*.t0.tiles.ditu.live.com;*.t1.tiles.ditu.live.com;*.t2.tiles.ditu.live.com;*.t3.tiles.ditu.live.com;*.tiles.ditu.live.com;3d.live.com;api.search.live.com;beta.search.live.com;cnweb.search.live.com;dev.live.com;ditu.live.com;farecast.live.com;image.live.com;images.live.com;local.live.com.au;localsearch.live.com;ls4d.search.live.com;mail.live.com;mapindia.live.com;local.live.com;maps.live.com;maps.live.com.au;mindia.live.com;news.live.com;origin.cnweb.search.live.com;preview.local.live.com;search.live.com;test.maps.live.com;video.live.com;videos.live.com;virtualearth.live.com;wap.live.com;webmaster.live.com;webmasters.live.com;www.local.live.com.au;www.maps.live.com.au", + "ssl_cert_SerialNum": "0x7f0012e261129541195fac1a6000000012e261", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "210706015313Z", + "ssl_cert_To": "220106015313Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", + "name": "SSL_RESULT_1" + } +]
\ No newline at end of file diff --git a/test/pcap/ssl/ssl_result.json b/test/pcap/ssl/ssl_result.json index ed7d862..0080518 100644 --- a/test/pcap/ssl/ssl_result.json +++ b/test/pcap/ssl/ssl_result.json @@ -1,49 +1,61 @@ -[{ - "Tuple4": "192.168.50.38.52391>104.16.123.96.443", - "ssl_sni": "ESNI", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "62a4a00de930bd0a5bee0309cc8362ed", - "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", - "name": "SSL_RESULT_1" -}, { - "Tuple4": "192.168.2.102.56768>34.138.246.121.443", - "ssl_sni": "public.tls-ech.dev", - "ssl_ech": "1", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "a195b9c006fcb23ab9a2343b0871e362", - "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", - "name": "SSL_RESULT_2" -}, { - "Tuple4": "90.143.182.94.55835>93.186.227.131.443", - "ssl_sni": "sun9-20.userapi.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "6f5e62edfa5933b1332ddf8b9fb3ef9d", - "ssl_ja3s_hash": "2d1eb5817ece335c24904f516ad5da12", - "ssl_cert_version": "v3", - "ssl_cert_Issuer": "GlobalSign Organization Validation CA - SHA256 - G2;GlobalSign nv-sa;;;;;BE", - "ssl_cert_IssuerCN": "GlobalSign Organization Validation CA - SHA256 - G2", - "ssl_cert_IssuerO": "GlobalSign nv-sa", - "ssl_cert_IssuerC": "BE", - "ssl_cert_Sub": "*.userapi.com;V Kontakte LLC;;Saint-Petersburg;;Saint-Petersburg;RU", - "ssl_cert_SubCN": "*.userapi.com", - "ssl_cert_SubO": "V Kontakte LLC", - "ssl_cert_SubC": "RU", - "ssl_cert_SubP": "Saint-Petersburg", - "ssl_cert_SubL": "Saint-Petersburg", - "ssl_cert_SubCN": "*.userapi.com", - "ssl_cert_SubAltName": "*.userapi.com;vk.me;*.vk-cdn.net;*.vkuserlive.com;*.vkuserlive.net;*.vkuseraudio.net;*.vkuseraudio.com;*.vkuservideo.net;*.vkuservideo.com;*.vk.me;userapi.com", - "ssl_cert_SerialNum": "0x5afa3a189e6a5c11e1e18b0f", - "ssl_cert_AgID": "1.2.840.113549.1.1.11", - "ssl_cert_From": "180717083809Z", - "ssl_cert_To": "190714162604Z", - "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", - "name": "SSL_RESULT_3" -}, { - "Tuple4": "192.168.2.102.56776>34.138.246.121.443", - "ssl_sni": "public.tls-ech.dev", - "ssl_ech": "1", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "a195b9c006fcb23ab9a2343b0871e362", - "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", - "name": "SSL_RESULT_4" -}] +[ + { + "Tuple4": "192.168.50.38.52391>104.16.123.96.443", + "ssl_sni": "ESNI", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "62a4a00de930bd0a5bee0309cc8362ed", + "ssl_ja4_hash": "t13i1813h2_e8a523a41297_0d6ff543c596", + "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", + "ssl_ja4s_hash": "t120200_1301_234ea6891581", + "name": "SSL_RESULT_1" + }, + { + "Tuple4": "192.168.2.102.56768>34.138.246.121.443", + "ssl_sni": "public.tls-ech.dev", + "ssl_ech": "1", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "a195b9c006fcb23ab9a2343b0871e362", + "ssl_ja4_hash": "t13d1715h2_5b57614c22b0_7121afd63204", + "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", + "ssl_ja4s_hash": "t120300_1301_6bbbaf601ed8", + "name": "SSL_RESULT_2" + }, + { + "Tuple4": "90.143.182.94.55835>93.186.227.131.443", + "ssl_sni": "sun9-20.userapi.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "6f5e62edfa5933b1332ddf8b9fb3ef9d", + "ssl_ja4_hash": "t12d1209h2_d34a8e72043a_e08eabe7240f", + "ssl_ja3s_hash": "2d1eb5817ece335c24904f516ad5da12", + "ssl_ja4s_hash": "t1205h1_c02b_bec8bdbaef8a", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "GlobalSign Organization Validation CA - SHA256 - G2;GlobalSign nv-sa;;;;;BE", + "ssl_cert_IssuerCN": "GlobalSign Organization Validation CA - SHA256 - G2", + "ssl_cert_IssuerO": "GlobalSign nv-sa", + "ssl_cert_IssuerC": "BE", + "ssl_cert_Sub": "*.userapi.com;V Kontakte LLC;;Saint-Petersburg;;Saint-Petersburg;RU", + "ssl_cert_SubO": "V Kontakte LLC", + "ssl_cert_SubC": "RU", + "ssl_cert_SubP": "Saint-Petersburg", + "ssl_cert_SubL": "Saint-Petersburg", + "ssl_cert_SubCN": "*.userapi.com", + "ssl_cert_SubAltName": "*.userapi.com;vk.me;*.vk-cdn.net;*.vkuserlive.com;*.vkuserlive.net;*.vkuseraudio.net;*.vkuseraudio.com;*.vkuservideo.net;*.vkuservideo.com;*.vk.me;userapi.com", + "ssl_cert_SerialNum": "0x5afa3a189e6a5c11e1e18b0f", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "180717083809Z", + "ssl_cert_To": "190714162604Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", + "name": "SSL_RESULT_3" + }, + { + "Tuple4": "192.168.2.102.56776>34.138.246.121.443", + "ssl_sni": "public.tls-ech.dev", + "ssl_ech": "1", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "a195b9c006fcb23ab9a2343b0871e362", + "ssl_ja4_hash": "t13d1715h2_5b57614c22b0_7121afd63204", + "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", + "ssl_ja4s_hash": "t120300_1301_6bbbaf601ed8", + "name": "SSL_RESULT_4" + } +]
\ No newline at end of file diff --git a/test/pcap/tcp_ack_contians_payload/ssl_tcp_ack_contians_payload_result.json b/test/pcap/tcp_ack_contians_payload/ssl_tcp_ack_contians_payload_result.json index 9632ce8..0719be8 100644 --- a/test/pcap/tcp_ack_contians_payload/ssl_tcp_ack_contians_payload_result.json +++ b/test/pcap/tcp_ack_contians_payload/ssl_tcp_ack_contians_payload_result.json @@ -5,6 +5,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "6f7971785f5cbbcb21819b6639f0e8f7", + "ssl_ja4_hash": "t13d1517h2_8daaf6152771_b1ff8ab2d16f", "name": "SSL_RESULT_1" }, { @@ -13,6 +14,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "0ac1d260c0b1f0e3bf645d6580ea6343", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_02713d6af862", "name": "SSL_RESULT_2" }, { @@ -21,6 +23,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "ca54aeeb513ecacf4d7bc22c5d8f0b75", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_02713d6af862", "name": "SSL_RESULT_3" }, { @@ -29,6 +32,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "9e41793e6f0a1696bedc0876465e1f42", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_02713d6af862", "name": "SSL_RESULT_4" }, { @@ -37,6 +41,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "47c3fabcf1bc65a32a9d3fb8e70ab79d", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_02713d6af862", "name": "SSL_RESULT_5" }, { @@ -45,6 +50,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "04331a57b3e122e689c373712edf42c0", + "ssl_ja4_hash": "t13d1517h2_8daaf6152771_b0da82dd1658", "name": "SSL_RESULT_6" }, { @@ -53,6 +59,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "34c3efe4e6565e8eef2eaaeb7c12a1a6", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_02713d6af862", "name": "SSL_RESULT_7" }, { @@ -61,6 +68,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "cc97290a5bb4651489fe7a88e93ace90", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_02713d6af862", "name": "SSL_RESULT_8" }, { @@ -69,6 +77,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "4e6ae21ce8b876dc7cad2f5ca9a60b23", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_02713d6af862", "name": "SSL_RESULT_9" }, { @@ -77,6 +86,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "89cb560e9ee2d33728756a2d4d7b2900", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_02713d6af862", "name": "SSL_RESULT_10" }, { @@ -85,6 +95,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "7324d30178b21f4c3a60550ef43d5ab0", + "ssl_ja4_hash": "t13d1517h2_8daaf6152771_b0da82dd1658", "name": "SSL_RESULT_11" }, { @@ -93,6 +104,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "53fed08198669268c271fc320627c0c4", + "ssl_ja4_hash": "t13d1517h2_8daaf6152771_b1ff8ab2d16f", "name": "SSL_RESULT_12" }, { @@ -101,6 +113,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "c3db97da3b30171e5cf9de314584b555", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_02713d6af862", "name": "SSL_RESULT_13" }, { @@ -109,6 +122,7 @@ "ssl_ech": "1", "ssl_client_version": "TLS1.2", "ssl_ja3_hash": "ff194650bab04e7b4cd55e66fd91c010", + "ssl_ja4_hash": "t13d1517h2_8daaf6152771_b0da82dd1658", "name": "SSL_RESULT_14" } ]
\ No newline at end of file diff --git a/test/pcap/tlcp/tlcp_result.json b/test/pcap/tlcp/tlcp_result.json index 9e300df..b69f2a7 100644 --- a/test/pcap/tlcp/tlcp_result.json +++ b/test/pcap/tlcp/tlcp_result.json @@ -4,7 +4,9 @@ "ssl_sni": "wap.citicbank.cn", "ssl_client_version": "TLCP1.1", "ssl_ja3_hash": "3e8b40596a01530fa02d265ff3c397cc", + "ssl_ja4_hash": "t00d580100_1c66dbf0bb07_000000000000", "ssl_ja3s_hash": "425270d1bb1ca2d7b07a2f70420d4c07", + "ssl_ja4s_hash": "t000200_e013_bc98f8e001b5", "ssl_cert_version": "v3", "ssl_cert_Issuer": "Beijing SM2 CA;BJCA;BJCA;;;;CN", "ssl_cert_IssuerCN": "Beijing SM2 CA", diff --git a/test/pcap/xxg/ssl_xxg_target_result.json b/test/pcap/xxg/ssl_xxg_target_result.json index 3fc12c0..f898221 100644 --- a/test/pcap/xxg/ssl_xxg_target_result.json +++ b/test/pcap/xxg/ssl_xxg_target_result.json @@ -1,1279 +1,1699 @@ -[{ - "Tuple4": "192.168.50.33.51933>54.230.21.91.443", - "name": "SSL_RESULT_1" - }, { - "Tuple4": "192.168.50.52.17312>142.250.66.99.443", - "ssl_sni": "www.gstatic.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", - "name": "SSL_RESULT_2" - }, { - "Tuple4": "192.168.50.52.17313>142.250.66.99.443", - "ssl_sni": "www.gstatic.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", - "name": "SSL_RESULT_3" - }, { - "Tuple4": "192.168.50.52.17330>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_4" - }, { - "Tuple4": "192.168.50.52.17332>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_5" - }, { - "Tuple4": "192.168.50.52.17331>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_6" - }, { - "Tuple4": "192.168.50.52.17335>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_7" - }, { - "Tuple4": "192.168.50.52.17337>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_8" - }, { - "Tuple4": "192.168.50.52.17336>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_9" - }, { - "Tuple4": "192.168.50.52.17339>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_10" - }, { - "Tuple4": "192.168.50.52.17340>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_11" - }, { - "Tuple4": "192.168.50.33.63477>142.250.66.78.443", - "name": "SSL_RESULT_12" - }, { - "Tuple4": "192.168.50.52.17356>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_13" - }, { - "Tuple4": "192.168.50.52.17357>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_14" - }, { - "Tuple4": "192.168.50.52.17358>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_15" - }, { - "Tuple4": "192.168.50.52.17359>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_16" - }, { - "Tuple4": "192.168.50.33.50714>142.250.66.134.443", - "name": "SSL_RESULT_17" - }, { - "Tuple4": "192.168.50.52.17367>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_18" - }, { - "Tuple4": "192.168.50.52.17368>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_19" - }, { - "Tuple4": "192.168.50.52.17370>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_20" - }, { - "Tuple4": "192.168.50.52.17369>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_21" - }, { - "Tuple4": "192.168.50.52.17378>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_22" - }, { - "Tuple4": "192.168.50.52.17379>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_23" - }, { - "Tuple4": "192.168.50.52.17383>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_24" - }, { - "Tuple4": "192.168.50.52.17382>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_25" - }, { - "Tuple4": "192.168.50.52.17385>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_26" - }, { - "Tuple4": "192.168.50.52.17389>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_27" - }, { - "Tuple4": "192.168.50.52.17387>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_28" - }, { - "Tuple4": "192.168.50.52.17386>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_29" - }, { - "Tuple4": "192.168.50.52.17390>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_30" - }, { - "Tuple4": "192.168.50.52.17391>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_31" - }, { - "Tuple4": "192.168.50.52.17392>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_32" - }, { - "Tuple4": "192.168.50.52.17395>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_33" - }, { - "Tuple4": "192.168.50.52.17393>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_34" - }, { - "Tuple4": "192.168.50.52.17396>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_35" - }, { - "Tuple4": "192.168.50.52.17394>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_36" - }, { - "Tuple4": "192.168.50.52.17397>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_37" - }, { - "Tuple4": "192.168.50.52.17398>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_38" - }, { - "Tuple4": "192.168.50.52.17403>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_39" - }, { - "Tuple4": "192.168.50.52.17402>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_40" - }, { - "Tuple4": "192.168.50.52.17405>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_41" - }, { - "Tuple4": "192.168.50.52.17404>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_42" - }, { - "Tuple4": "192.168.50.52.17406>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_43" - }, { - "Tuple4": "192.168.50.52.17407>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_44" - }, { - "Tuple4": "192.168.50.52.17409>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_45" - }, { - "Tuple4": "192.168.50.52.17408>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_46" - }, { - "Tuple4": "192.168.50.52.17413>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_47" - }, { - "Tuple4": "192.168.50.52.17412>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_48" - }, { - "Tuple4": "192.168.50.52.17415>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_49" - }, { - "Tuple4": "192.168.50.52.17416>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_50" - }, { - "Tuple4": "192.168.50.52.17421>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_51" - }, { - "Tuple4": "192.168.50.52.17420>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_52" - }, { - "Tuple4": "192.168.50.52.17422>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_53" - }, { - "Tuple4": "192.168.50.52.17423>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_54" - }, { - "Tuple4": "192.168.50.52.17424>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_55" - }, { - "Tuple4": "192.168.50.52.17429>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_56" - }, { - "Tuple4": "192.168.50.52.17430>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_57" - }, { - "Tuple4": "192.168.50.52.17380>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_58" - }, { - "Tuple4": "192.168.50.52.17438>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_59" - }, { - "Tuple4": "192.168.50.52.17388>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_60" - }, { - "Tuple4": "192.168.50.52.17439>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_61" - }, { - "Tuple4": "192.168.50.52.17401>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_62" - }, { - "Tuple4": "192.168.50.52.17400>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_63" - }, { - "Tuple4": "192.168.50.52.17440>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_64" - }, { - "Tuple4": "192.168.50.52.17442>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_65" - }, { - "Tuple4": "192.168.50.52.17443>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_66" - }, { - "Tuple4": "192.168.50.52.17441>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_67" - }, { - "Tuple4": "192.168.50.52.17410>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_68" - }, { - "Tuple4": "192.168.50.52.17444>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_69" - }, { - "Tuple4": "192.168.50.52.17445>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_70" - }, { - "Tuple4": "192.168.50.52.17419>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_71" - }, { - "Tuple4": "192.168.50.52.17417>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_72" - }, { - "Tuple4": "192.168.50.52.17414>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_73" - }, { - "Tuple4": "192.168.50.52.17411>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_74" - }, { - "Tuple4": "192.168.50.52.17448>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_75" - }, { - "Tuple4": "192.168.50.52.17449>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_76" - }, { - "Tuple4": "192.168.50.52.17451>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_77" - }, { - "Tuple4": "192.168.50.52.17452>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_78" - }, { - "Tuple4": "192.168.50.52.17453>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_79" - }, { - "Tuple4": "192.168.50.52.17454>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_80" - }, { - "Tuple4": "192.168.50.52.17455>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_81" - }, { - "Tuple4": "192.168.50.52.17425>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_82" - }, { - "Tuple4": "192.168.50.52.17426>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_83" - }, { - "Tuple4": "192.168.50.52.17456>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_84" - }, { - "Tuple4": "192.168.50.52.17457>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_85" - }, { - "Tuple4": "192.168.50.52.17458>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_86" - }, { - "Tuple4": "192.168.50.52.17459>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_87" - }, { - "Tuple4": "192.168.50.52.17428>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_88" - }, { - "Tuple4": "192.168.50.52.17460>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_89" - }, { - "Tuple4": "192.168.50.52.17461>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_90" - }, { - "Tuple4": "192.168.50.52.17462>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_91" - }, { - "Tuple4": "192.168.50.52.17464>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_92" - }, { - "Tuple4": "192.168.50.52.17463>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_93" - }, { - "Tuple4": "192.168.50.52.17466>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_94" - }, { - "Tuple4": "192.168.50.52.17465>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_95" - }, { - "Tuple4": "192.168.50.52.17468>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_96" - }, { - "Tuple4": "192.168.50.52.17431>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_97" - }, { - "Tuple4": "192.168.50.52.17469>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_98" - }, { - "Tuple4": "192.168.50.52.17470>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_99" - }, { - "Tuple4": "192.168.50.52.17473>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_100" - }, { - "Tuple4": "192.168.50.52.17474>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_101" - }, { - "Tuple4": "192.168.50.52.17471>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_102" - }, { - "Tuple4": "192.168.50.52.17472>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_103" - }, { - "Tuple4": "192.168.50.52.17475>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_104" - }, { - "Tuple4": "192.168.50.52.17476>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_105" - }, { - "Tuple4": "192.168.50.52.17477>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_106" - }, { - "Tuple4": "192.168.50.52.17481>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_107" - }, { - "Tuple4": "192.168.50.52.17479>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_108" - }, { - "Tuple4": "192.168.50.52.17483>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_109" - }, { - "Tuple4": "192.168.50.52.17484>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_110" - }, { - "Tuple4": "192.168.50.52.17485>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_111" - }, { - "Tuple4": "192.168.50.52.17486>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_112" - }, { - "Tuple4": "192.168.50.52.17487>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_113" - }, { - "Tuple4": "192.168.50.52.17488>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_114" - }, { - "Tuple4": "192.168.50.52.17490>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_115" - }, { - "Tuple4": "192.168.50.52.17491>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_116" - }, { - "Tuple4": "192.168.50.52.17492>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_117" - }, { - "Tuple4": "192.168.50.52.17493>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_118" - }, { - "Tuple4": "192.168.50.52.17494>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_119" - }, { - "Tuple4": "192.168.50.52.17495>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_120" - }, { - "Tuple4": "192.168.50.52.17496>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_121" - }, { - "Tuple4": "192.168.50.52.17497>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_122" - }, { - "Tuple4": "192.168.50.52.17498>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_123" - }, { - "Tuple4": "192.168.50.52.17499>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_124" - }, { - "Tuple4": "192.168.50.52.17500>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_125" - }, { - "Tuple4": "192.168.50.52.17501>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_126" - }, { - "Tuple4": "192.168.50.52.17502>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_127" - }, { - "Tuple4": "192.168.50.52.17503>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_128" - }, { - "Tuple4": "192.168.50.52.17504>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_129" - }, { - "Tuple4": "192.168.50.52.17505>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_130" - }, { - "Tuple4": "192.168.50.52.17506>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_131" - }, { - "Tuple4": "192.168.50.52.17507>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_132" - }, { - "Tuple4": "192.168.50.52.17508>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_133" - }, { - "Tuple4": "192.168.50.52.17509>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_134" - }, { - "Tuple4": "192.168.50.52.17511>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_135" - }, { - "Tuple4": "192.168.50.52.17510>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_136" - }, { - "Tuple4": "192.168.50.52.17512>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_137" - }, { - "Tuple4": "192.168.50.52.17513>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_138" - }, { - "Tuple4": "192.168.50.52.17514>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_139" - }, { - "Tuple4": "192.168.50.52.17515>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_140" - }, { - "Tuple4": "192.168.50.52.17516>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_141" - }, { - "Tuple4": "192.168.50.52.17519>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_142" - }, { - "Tuple4": "192.168.50.52.17518>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_143" - }, { - "Tuple4": "192.168.50.52.17520>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_144" - }, { - "Tuple4": "192.168.50.52.17521>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_145" - }, { - "Tuple4": "192.168.50.52.17522>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_146" - }, { - "Tuple4": "192.168.50.52.17523>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_147" - }, { - "Tuple4": "192.168.50.52.17524>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_148" - }, { - "Tuple4": "192.168.50.52.17526>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_149" - }, { - "Tuple4": "192.168.50.52.17525>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_150" - }, { - "Tuple4": "192.168.50.52.17527>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_151" - }, { - "Tuple4": "192.168.50.52.17528>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_152" - }, { - "Tuple4": "192.168.50.52.17529>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_153" - }, { - "Tuple4": "192.168.50.52.17530>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_154" - }, { - "Tuple4": "192.168.50.52.17446>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_155" - }, { - "Tuple4": "192.168.50.52.17418>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_156" - }, { - "Tuple4": "192.168.50.52.17447>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_157" - }, { - "Tuple4": "192.168.50.52.17531>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_158" - }, { - "Tuple4": "192.168.50.52.17450>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_159" - }, { - "Tuple4": "192.168.50.52.17532>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_160" - }, { - "Tuple4": "192.168.50.52.17533>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_161" - }, { - "Tuple4": "192.168.50.52.17480>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_162" - }, { - "Tuple4": "192.168.50.52.17478>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_163" - }, { - "Tuple4": "192.168.50.52.17482>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_164" - }, { - "Tuple4": "192.168.50.52.17534>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_165" - }, { - "Tuple4": "192.168.50.52.17536>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_166" - }, { - "Tuple4": "192.168.50.52.17517>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_167" - }, { - "Tuple4": "192.168.50.52.17540>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_168" - }, { - "Tuple4": "192.168.50.52.17399>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_169" - }, { - "Tuple4": "192.168.50.52.17541>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_170" - }, { - "Tuple4": "192.168.50.52.17535>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_171" - }, { - "Tuple4": "192.168.50.52.17542>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_172" - }, { - "Tuple4": "192.168.50.52.17543>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_173" - }, { - "Tuple4": "192.168.50.52.17545>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_174" - }, { - "Tuple4": "192.168.50.52.17546>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_175" - }, { - "Tuple4": "192.168.50.52.17547>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_176" - }, { - "Tuple4": "192.168.50.52.17548>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_177" - }, { - "Tuple4": "192.168.50.52.17549>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_178" - }, { - "Tuple4": "192.168.50.52.17550>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_179" - }, { - "Tuple4": "192.168.50.52.17551>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_180" - }, { - "Tuple4": "192.168.50.52.17552>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_181" - }, { - "Tuple4": "192.168.50.52.17554>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_182" - }, { - "Tuple4": "192.168.50.33.64967>54.230.21.91.443", - "name": "SSL_RESULT_183" - }, { - "Tuple4": "192.168.50.52.17553>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_184" - }, { - "Tuple4": "192.168.50.52.17555>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_185" - }, { - "Tuple4": "192.168.50.52.17559>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_186" - }, { - "Tuple4": "192.168.50.33.57414>142.250.66.42.443", - "name": "SSL_RESULT_187" - }, { - "Tuple4": "192.168.50.33.60652>142.250.66.99.443", - "name": "SSL_RESULT_188" - }, { - "Tuple4": "192.168.50.33.58291>220.181.174.230.443", - "name": "SSL_RESULT_189" - }, { - "Tuple4": "192.168.50.33.50525>172.217.27.35.443", - "name": "SSL_RESULT_190" - }, { - "Tuple4": "192.168.50.33.56708>142.250.204.36.443", - "name": "SSL_RESULT_191" - }, { - "Tuple4": "192.168.50.33.55558>142.250.66.99.443", - "name": "SSL_RESULT_192" - }, { - "Tuple4": "192.168.50.33.65240>142.250.204.86.443", - "name": "SSL_RESULT_193" - }, { - "Tuple4": "192.168.50.33.57554>142.250.204.65.443", - "name": "SSL_RESULT_194" - }, { - "Tuple4": "192.168.50.33.65100>142.250.207.74.443", - "name": "SSL_RESULT_195" - }, { - "Tuple4": "192.168.50.33.54638>142.250.204.110.443", - "name": "SSL_RESULT_196" - }, { - "Tuple4": "192.168.50.33.63347>142.250.66.131.443", - "name": "SSL_RESULT_197" - }, { - "Tuple4": "192.168.50.52.1079>40.119.211.203.443", - "name": "SSL_RESULT_198" - }, { - "Tuple4": "192.168.50.52.17311>142.250.66.99.443", - "ssl_sni": "www.gstatic.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", - "name": "SSL_RESULT_199" - }, { - "Tuple4": "192.168.50.52.14756>172.217.24.110.443", - "name": "SSL_RESULT_200" - }, { - "Tuple4": "192.168.50.52.27956>40.90.189.152.443", - "name": "SSL_RESULT_201" - }, { - "Tuple4": "192.168.50.52.17376>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "16c0b3e6a7b8173c16d944cfeaeee9cf", - "ssl_cert_version": "v3", - "ssl_cert_Issuer": "GlobalSign Atlas R3 OV TLS CA H2 2021;GlobalSign nv-sa;;;;;BE", - "ssl_cert_IssuerCN": "GlobalSign Atlas R3 OV TLS CA H2 2021", - "ssl_cert_IssuerO": "GlobalSign nv-sa", - "ssl_cert_IssuerC": "BE", - "ssl_cert_Sub": "sites.target.com;Target Corporation;;Minneapolis;;Minnesota;US", - "ssl_cert_SubCN": "sites.target.com", - "ssl_cert_SubO": "Target Corporation", - "ssl_cert_SubC": "US", - "ssl_cert_SubP": "Minnesota", - "ssl_cert_SubL": "Minneapolis", - "ssl_cert_SubAltName": "sites.target.com;affiliate.target.com;android.studioconnect.live;api.studioconnect.live;apollo-metrics.target.com;assethub.partnersonline.com;assethub.target.com;awesomeshop.target.com;bex.partnersonline.com;bex.target.com;cartster.target.com;cartwheel.target.com;cartwheelws-secure.target.com;circle.target.com;connect.roundel.com;connectedcommerce.target.com;corporate.target.com;developer.target.com;dojo.target.com;doppler.partnersonline.com;elevate.target.com;extgargantua.partnersonline.com;factorial.partnersonline.com;finds.target.com;gql.studioconnect.live;greenfield.partnersonline.com;greenfield.target.com;hrocdocrequest.target.com;iccon.target.com;incubator.target.com;india.target.com;ios.studioconnect.live;jira.target.com;launchpad.partnersonline.com;launchpad.target.com;leads.studioconnect.live;m.target.com;marketinghub.target.com;mercury.partnersonline.com;mickra.target.com;mickradashboard.target.com;mvs.partnersonline.com;mytime.target.com;nic.target;openhouse.target.com;opensource.target.com;osmosis.partnersonline.com;partnersonline.com;pcn.partnersonline.com;peg.partnersonline.com;photosubmission.target.com;pid.partnersonline.com;plus.target.com;pmworkorderadmin.partnersonline.com;poladmin.partnersonline.com;pop.partnersonline.com;qmp.partnersonline.com;qr.target.com;r2d2.target.com;rdmplus.target.com;recognize.target.com;redcard.target.com;redirect.studioconnect.live;rik.roundel.com;roundel.com;rubix.partnersonline.com;rubix.target.com;security.target.com;servicetech.target.com;sm.partnersonline.com;spark.partnersonline.com;spark.target.com;studioconnect.live;stylehub.target.com;synergy.partnersonline.com;target.com;targetmedianetwork.target.com;targetopenhouse.com;tepagent.target.com;tgt-files.target.com;tgtdriver.partnersonline.com;ti-event-prod.target.com;tiam.target.com;tiiam.target.com;tvi.partnersonline.com;viewpoint.target.com;weeklyad.target.com;www.partnersonline.com;www.roundel.com;www.target.com;www.targetopenhouse.com", - "ssl_cert_SerialNum": "0x012ede33fc9283773396e9b1ff995262", - "ssl_cert_AgID": "1.2.840.113549.1.1.11", - "ssl_cert_From": "210928164609Z", - "ssl_cert_To": "221030164608Z", - "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", - "name": "SSL_RESULT_202" - }, { - "Tuple4": "192.168.50.52.17384>220.181.174.102.443", - "ssl_sni": "securepubads.g.doubleclick.net", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "598872011444709307b861ae817a4b60", - "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", - "name": "SSL_RESULT_203" - }, { - "Tuple4": "192.168.50.52.17427>172.217.31.2.443", - "ssl_sni": "pagead2.googlesyndication.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "598872011444709307b861ae817a4b60", - "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", - "name": "SSL_RESULT_204" - }, { - "Tuple4": "192.168.50.52.17381>23.57.114.38.443", - "ssl_sni": "js-sec.indexww.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "410b9bedaf65dd26c6fe547154d60db4", - "name": "SSL_RESULT_205" - }, { - "Tuple4": "192.168.50.52.17432>220.181.174.102.443", - "ssl_sni": "securepubads.g.doubleclick.net", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "598872011444709307b861ae817a4b60", - "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", - "name": "SSL_RESULT_206" - }, { - "Tuple4": "192.168.50.52.17434>15.197.193.217.443", - "ssl_sni": "match.adsrvr.org", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "8d2a028aa94425f76ced7826b1f39039", - "ssl_cert_version": "v3", - "ssl_cert_Issuer": "GlobalSign GCC R3 DV TLS CA 2020;GlobalSign nv-sa;;;;;BE", - "ssl_cert_IssuerCN": "GlobalSign GCC R3 DV TLS CA 2020", - "ssl_cert_IssuerO": "GlobalSign nv-sa", - "ssl_cert_IssuerC": "BE", - "ssl_cert_Sub": "*.adsrvr.org;;;;;;", - "ssl_cert_SubCN": "*.adsrvr.org", - "ssl_cert_SubAltName": "*.adsrvr.org;adsrvr.org", - "ssl_cert_SerialNum": "0x2ddaa6f359d4ce458fe983f1", - "ssl_cert_AgID": "1.2.840.113549.1.1.11", - "ssl_cert_From": "220331203750Z", - "ssl_cert_To": "230502203749Z", - "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", - "name": "SSL_RESULT_207" - }, { - "Tuple4": "192.168.50.52.17375>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "16c0b3e6a7b8173c16d944cfeaeee9cf", - "ssl_cert_version": "v3", - "ssl_cert_Issuer": "GlobalSign Atlas R3 OV TLS CA H2 2021;GlobalSign nv-sa;;;;;BE", - "ssl_cert_IssuerCN": "GlobalSign Atlas R3 OV TLS CA H2 2021", - "ssl_cert_IssuerO": "GlobalSign nv-sa", - "ssl_cert_IssuerC": "BE", - "ssl_cert_Sub": "sites.target.com;Target Corporation;;Minneapolis;;Minnesota;US", - "ssl_cert_SubCN": "sites.target.com", - "ssl_cert_SubO": "Target Corporation", - "ssl_cert_SubC": "US", - "ssl_cert_SubP": "Minnesota", - "ssl_cert_SubL": "Minneapolis", - "ssl_cert_SubAltName": "sites.target.com;affiliate.target.com;android.studioconnect.live;api.studioconnect.live;apollo-metrics.target.com;assethub.partnersonline.com;assethub.target.com;awesomeshop.target.com;bex.partnersonline.com;bex.target.com;cartster.target.com;cartwheel.target.com;cartwheelws-secure.target.com;circle.target.com;connect.roundel.com;connectedcommerce.target.com;corporate.target.com;developer.target.com;dojo.target.com;doppler.partnersonline.com;elevate.target.com;extgargantua.partnersonline.com;factorial.partnersonline.com;finds.target.com;gql.studioconnect.live;greenfield.partnersonline.com;greenfield.target.com;hrocdocrequest.target.com;iccon.target.com;incubator.target.com;india.target.com;ios.studioconnect.live;jira.target.com;launchpad.partnersonline.com;launchpad.target.com;leads.studioconnect.live;m.target.com;marketinghub.target.com;mercury.partnersonline.com;mickra.target.com;mickradashboard.target.com;mvs.partnersonline.com;mytime.target.com;nic.target;openhouse.target.com;opensource.target.com;osmosis.partnersonline.com;partnersonline.com;pcn.partnersonline.com;peg.partnersonline.com;photosubmission.target.com;pid.partnersonline.com;plus.target.com;pmworkorderadmin.partnersonline.com;poladmin.partnersonline.com;pop.partnersonline.com;qmp.partnersonline.com;qr.target.com;r2d2.target.com;rdmplus.target.com;recognize.target.com;redcard.target.com;redirect.studioconnect.live;rik.roundel.com;roundel.com;rubix.partnersonline.com;rubix.target.com;security.target.com;servicetech.target.com;sm.partnersonline.com;spark.partnersonline.com;spark.target.com;studioconnect.live;stylehub.target.com;synergy.partnersonline.com;target.com;targetmedianetwork.target.com;targetopenhouse.com;tepagent.target.com;tgt-files.target.com;tgtdriver.partnersonline.com;ti-event-prod.target.com;tiam.target.com;tiiam.target.com;tvi.partnersonline.com;viewpoint.target.com;weeklyad.target.com;www.partnersonline.com;www.roundel.com;www.target.com;www.targetopenhouse.com", - "ssl_cert_SerialNum": "0x012ede33fc9283773396e9b1ff995262", - "ssl_cert_AgID": "1.2.840.113549.1.1.11", - "ssl_cert_From": "210928164609Z", - "ssl_cert_To": "221030164608Z", - "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", - "name": "SSL_RESULT_208" - }, { - "Tuple4": "192.168.50.52.17433>3.217.136.163.443", - "ssl_sni": "idx.liadm.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "303951d4c50efb2e991652225a6f02b1", - "name": "SSL_RESULT_209" - }, { - "Tuple4": "192.168.50.52.17437>3.217.136.163.443", - "ssl_sni": "idx.liadm.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "303951d4c50efb2e991652225a6f02b1", - "name": "SSL_RESULT_210" - }, { - "Tuple4": "192.168.50.52.17544>142.250.207.74.443", - "ssl_sni": "content-autofill.googleapis.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "598872011444709307b861ae817a4b60", - "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", - "name": "SSL_RESULT_211" - }, { - "Tuple4": "192.168.50.57.54160>39.105.29.36.443", - "name": "SSL_RESULT_212" - }, { - "Tuple4": "192.168.50.57.54162>39.105.29.36.443", - "name": "SSL_RESULT_213" -}] +[ + { + "Tuple4": "192.168.50.33.51933>54.230.21.91.443", + "name": "SSL_RESULT_1" + }, + { + "Tuple4": "192.168.50.52.17312>142.250.66.99.443", + "ssl_sni": "www.gstatic.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", + "ssl_ja4s_hash": "t120200_1301_234ea6891581", + "name": "SSL_RESULT_2" + }, + { + "Tuple4": "192.168.50.52.17313>142.250.66.99.443", + "ssl_sni": "www.gstatic.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", + "ssl_ja4s_hash": "t120200_1301_234ea6891581", + "name": "SSL_RESULT_3" + }, + { + "Tuple4": "192.168.50.52.17330>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_4" + }, + { + "Tuple4": "192.168.50.52.17332>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_5" + }, + { + "Tuple4": "192.168.50.52.17331>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_6" + }, + { + "Tuple4": "192.168.50.52.17335>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_7" + }, + { + "Tuple4": "192.168.50.52.17337>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_8" + }, + { + "Tuple4": "192.168.50.52.17336>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_9" + }, + { + "Tuple4": "192.168.50.52.17339>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_10" + }, + { + "Tuple4": "192.168.50.52.17340>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_11" + }, + { + "Tuple4": "192.168.50.33.63477>142.250.66.78.443", + "name": "SSL_RESULT_12" + }, + { + "Tuple4": "192.168.50.52.17356>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_13" + }, + { + "Tuple4": "192.168.50.52.17357>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_14" + }, + { + "Tuple4": "192.168.50.52.17358>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_15" + }, + { + "Tuple4": "192.168.50.52.17359>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_16" + }, + { + "Tuple4": "192.168.50.33.50714>142.250.66.134.443", + "name": "SSL_RESULT_17" + }, + { + "Tuple4": "192.168.50.52.17367>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_18" + }, + { + "Tuple4": "192.168.50.52.17368>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_19" + }, + { + "Tuple4": "192.168.50.52.17370>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_20" + }, + { + "Tuple4": "192.168.50.52.17369>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_21" + }, + { + "Tuple4": "192.168.50.52.17378>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_22" + }, + { + "Tuple4": "192.168.50.52.17379>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_23" + }, + { + "Tuple4": "192.168.50.52.17383>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_24" + }, + { + "Tuple4": "192.168.50.52.17382>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_25" + }, + { + "Tuple4": "192.168.50.52.17385>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_26" + }, + { + "Tuple4": "192.168.50.52.17389>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_27" + }, + { + "Tuple4": "192.168.50.52.17387>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_28" + }, + { + "Tuple4": "192.168.50.52.17386>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_29" + }, + { + "Tuple4": "192.168.50.52.17390>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_30" + }, + { + "Tuple4": "192.168.50.52.17391>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_31" + }, + { + "Tuple4": "192.168.50.52.17392>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_32" + }, + { + "Tuple4": "192.168.50.52.17395>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_33" + }, + { + "Tuple4": "192.168.50.52.17393>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_34" + }, + { + "Tuple4": "192.168.50.52.17396>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_35" + }, + { + "Tuple4": "192.168.50.52.17394>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_36" + }, + { + "Tuple4": "192.168.50.52.17397>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_37" + }, + { + "Tuple4": "192.168.50.52.17398>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_38" + }, + { + "Tuple4": "192.168.50.52.17403>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_39" + }, + { + "Tuple4": "192.168.50.52.17402>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_40" + }, + { + "Tuple4": "192.168.50.52.17405>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_41" + }, + { + "Tuple4": "192.168.50.52.17404>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_42" + }, + { + "Tuple4": "192.168.50.52.17406>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_43" + }, + { + "Tuple4": "192.168.50.52.17407>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_44" + }, + { + "Tuple4": "192.168.50.52.17409>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_45" + }, + { + "Tuple4": "192.168.50.52.17408>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_46" + }, + { + "Tuple4": "192.168.50.52.17413>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_47" + }, + { + "Tuple4": "192.168.50.52.17412>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_48" + }, + { + "Tuple4": "192.168.50.52.17415>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_49" + }, + { + "Tuple4": "192.168.50.52.17416>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_50" + }, + { + "Tuple4": "192.168.50.52.17421>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_51" + }, + { + "Tuple4": "192.168.50.52.17420>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_52" + }, + { + "Tuple4": "192.168.50.52.17422>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_53" + }, + { + "Tuple4": "192.168.50.52.17423>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_54" + }, + { + "Tuple4": "192.168.50.52.17424>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_55" + }, + { + "Tuple4": "192.168.50.52.17429>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_56" + }, + { + "Tuple4": "192.168.50.52.17430>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_57" + }, + { + "Tuple4": "192.168.50.52.17380>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_58" + }, + { + "Tuple4": "192.168.50.52.17438>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_59" + }, + { + "Tuple4": "192.168.50.52.17388>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_60" + }, + { + "Tuple4": "192.168.50.52.17439>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_61" + }, + { + "Tuple4": "192.168.50.52.17401>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_62" + }, + { + "Tuple4": "192.168.50.52.17400>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_63" + }, + { + "Tuple4": "192.168.50.52.17440>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_64" + }, + { + "Tuple4": "192.168.50.52.17442>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_65" + }, + { + "Tuple4": "192.168.50.52.17443>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_66" + }, + { + "Tuple4": "192.168.50.52.17441>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_67" + }, + { + "Tuple4": "192.168.50.52.17410>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_68" + }, + { + "Tuple4": "192.168.50.52.17444>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_69" + }, + { + "Tuple4": "192.168.50.52.17445>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_70" + }, + { + "Tuple4": "192.168.50.52.17419>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_71" + }, + { + "Tuple4": "192.168.50.52.17417>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_72" + }, + { + "Tuple4": "192.168.50.52.17414>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_73" + }, + { + "Tuple4": "192.168.50.52.17411>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_74" + }, + { + "Tuple4": "192.168.50.52.17448>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_75" + }, + { + "Tuple4": "192.168.50.52.17449>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_76" + }, + { + "Tuple4": "192.168.50.52.17451>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_77" + }, + { + "Tuple4": "192.168.50.52.17452>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_78" + }, + { + "Tuple4": "192.168.50.52.17453>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_79" + }, + { + "Tuple4": "192.168.50.52.17454>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_80" + }, + { + "Tuple4": "192.168.50.52.17455>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_81" + }, + { + "Tuple4": "192.168.50.52.17425>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_82" + }, + { + "Tuple4": "192.168.50.52.17426>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_83" + }, + { + "Tuple4": "192.168.50.52.17456>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_84" + }, + { + "Tuple4": "192.168.50.52.17457>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_85" + }, + { + "Tuple4": "192.168.50.52.17458>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_86" + }, + { + "Tuple4": "192.168.50.52.17459>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_87" + }, + { + "Tuple4": "192.168.50.52.17428>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_88" + }, + { + "Tuple4": "192.168.50.52.17460>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_89" + }, + { + "Tuple4": "192.168.50.52.17461>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_90" + }, + { + "Tuple4": "192.168.50.52.17462>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_91" + }, + { + "Tuple4": "192.168.50.52.17464>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_92" + }, + { + "Tuple4": "192.168.50.52.17463>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_93" + }, + { + "Tuple4": "192.168.50.52.17466>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_94" + }, + { + "Tuple4": "192.168.50.52.17465>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_95" + }, + { + "Tuple4": "192.168.50.52.17468>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_96" + }, + { + "Tuple4": "192.168.50.52.17431>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_97" + }, + { + "Tuple4": "192.168.50.52.17469>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_98" + }, + { + "Tuple4": "192.168.50.52.17470>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_99" + }, + { + "Tuple4": "192.168.50.52.17473>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_100" + }, + { + "Tuple4": "192.168.50.52.17474>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_101" + }, + { + "Tuple4": "192.168.50.52.17471>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_102" + }, + { + "Tuple4": "192.168.50.52.17472>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_103" + }, + { + "Tuple4": "192.168.50.52.17475>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_104" + }, + { + "Tuple4": "192.168.50.52.17476>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_105" + }, + { + "Tuple4": "192.168.50.52.17477>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_106" + }, + { + "Tuple4": "192.168.50.52.17481>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_107" + }, + { + "Tuple4": "192.168.50.52.17479>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_108" + }, + { + "Tuple4": "192.168.50.52.17483>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_109" + }, + { + "Tuple4": "192.168.50.52.17484>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_110" + }, + { + "Tuple4": "192.168.50.52.17485>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_111" + }, + { + "Tuple4": "192.168.50.52.17486>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_112" + }, + { + "Tuple4": "192.168.50.52.17487>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_113" + }, + { + "Tuple4": "192.168.50.52.17488>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_114" + }, + { + "Tuple4": "192.168.50.52.17490>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_115" + }, + { + "Tuple4": "192.168.50.52.17491>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_116" + }, + { + "Tuple4": "192.168.50.52.17492>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_117" + }, + { + "Tuple4": "192.168.50.52.17493>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_118" + }, + { + "Tuple4": "192.168.50.52.17494>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_119" + }, + { + "Tuple4": "192.168.50.52.17495>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_120" + }, + { + "Tuple4": "192.168.50.52.17496>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_121" + }, + { + "Tuple4": "192.168.50.52.17497>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_122" + }, + { + "Tuple4": "192.168.50.52.17498>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_123" + }, + { + "Tuple4": "192.168.50.52.17499>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_124" + }, + { + "Tuple4": "192.168.50.52.17500>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_125" + }, + { + "Tuple4": "192.168.50.52.17501>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_126" + }, + { + "Tuple4": "192.168.50.52.17502>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_127" + }, + { + "Tuple4": "192.168.50.52.17503>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_128" + }, + { + "Tuple4": "192.168.50.52.17504>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_129" + }, + { + "Tuple4": "192.168.50.52.17505>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_130" + }, + { + "Tuple4": "192.168.50.52.17506>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_131" + }, + { + "Tuple4": "192.168.50.52.17507>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_132" + }, + { + "Tuple4": "192.168.50.52.17508>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_133" + }, + { + "Tuple4": "192.168.50.52.17509>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_134" + }, + { + "Tuple4": "192.168.50.52.17511>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_135" + }, + { + "Tuple4": "192.168.50.52.17510>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_136" + }, + { + "Tuple4": "192.168.50.52.17512>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_137" + }, + { + "Tuple4": "192.168.50.52.17513>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_138" + }, + { + "Tuple4": "192.168.50.52.17514>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_139" + }, + { + "Tuple4": "192.168.50.52.17515>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_140" + }, + { + "Tuple4": "192.168.50.52.17516>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_141" + }, + { + "Tuple4": "192.168.50.52.17519>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_142" + }, + { + "Tuple4": "192.168.50.52.17518>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_143" + }, + { + "Tuple4": "192.168.50.52.17520>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_144" + }, + { + "Tuple4": "192.168.50.52.17521>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_145" + }, + { + "Tuple4": "192.168.50.52.17522>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_146" + }, + { + "Tuple4": "192.168.50.52.17523>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_147" + }, + { + "Tuple4": "192.168.50.52.17524>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_148" + }, + { + "Tuple4": "192.168.50.52.17526>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_149" + }, + { + "Tuple4": "192.168.50.52.17525>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_150" + }, + { + "Tuple4": "192.168.50.52.17527>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_151" + }, + { + "Tuple4": "192.168.50.52.17528>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_152" + }, + { + "Tuple4": "192.168.50.52.17529>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_153" + }, + { + "Tuple4": "192.168.50.52.17530>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_154" + }, + { + "Tuple4": "192.168.50.52.17446>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_155" + }, + { + "Tuple4": "192.168.50.52.17418>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_156" + }, + { + "Tuple4": "192.168.50.52.17447>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_157" + }, + { + "Tuple4": "192.168.50.52.17531>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_158" + }, + { + "Tuple4": "192.168.50.52.17450>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_159" + }, + { + "Tuple4": "192.168.50.52.17532>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_160" + }, + { + "Tuple4": "192.168.50.52.17533>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_161" + }, + { + "Tuple4": "192.168.50.52.17480>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_162" + }, + { + "Tuple4": "192.168.50.52.17478>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_163" + }, + { + "Tuple4": "192.168.50.52.17482>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_164" + }, + { + "Tuple4": "192.168.50.52.17534>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_165" + }, + { + "Tuple4": "192.168.50.52.17536>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_166" + }, + { + "Tuple4": "192.168.50.52.17517>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_167" + }, + { + "Tuple4": "192.168.50.52.17540>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_168" + }, + { + "Tuple4": "192.168.50.52.17399>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_169" + }, + { + "Tuple4": "192.168.50.52.17541>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_170" + }, + { + "Tuple4": "192.168.50.52.17535>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_171" + }, + { + "Tuple4": "192.168.50.52.17542>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_172" + }, + { + "Tuple4": "192.168.50.52.17543>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_173" + }, + { + "Tuple4": "192.168.50.52.17545>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_174" + }, + { + "Tuple4": "192.168.50.52.17546>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_175" + }, + { + "Tuple4": "192.168.50.52.17547>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_176" + }, + { + "Tuple4": "192.168.50.52.17548>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_177" + }, + { + "Tuple4": "192.168.50.52.17549>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_178" + }, + { + "Tuple4": "192.168.50.52.17550>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_179" + }, + { + "Tuple4": "192.168.50.52.17551>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_180" + }, + { + "Tuple4": "192.168.50.52.17552>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_181" + }, + { + "Tuple4": "192.168.50.52.17554>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_182" + }, + { + "Tuple4": "192.168.50.33.64967>54.230.21.91.443", + "name": "SSL_RESULT_183" + }, + { + "Tuple4": "192.168.50.52.17553>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "name": "SSL_RESULT_184" + }, + { + "Tuple4": "192.168.50.52.17555>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_185" + }, + { + "Tuple4": "192.168.50.52.17559>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_ef90417dd72d", + "name": "SSL_RESULT_186" + }, + { + "Tuple4": "192.168.50.33.57414>142.250.66.42.443", + "name": "SSL_RESULT_187" + }, + { + "Tuple4": "192.168.50.33.60652>142.250.66.99.443", + "name": "SSL_RESULT_188" + }, + { + "Tuple4": "192.168.50.33.58291>220.181.174.230.443", + "name": "SSL_RESULT_189" + }, + { + "Tuple4": "192.168.50.33.50525>172.217.27.35.443", + "name": "SSL_RESULT_190" + }, + { + "Tuple4": "192.168.50.33.56708>142.250.204.36.443", + "name": "SSL_RESULT_191" + }, + { + "Tuple4": "192.168.50.33.55558>142.250.66.99.443", + "name": "SSL_RESULT_192" + }, + { + "Tuple4": "192.168.50.33.65240>142.250.204.86.443", + "name": "SSL_RESULT_193" + }, + { + "Tuple4": "192.168.50.33.57554>142.250.204.65.443", + "name": "SSL_RESULT_194" + }, + { + "Tuple4": "192.168.50.33.65100>142.250.207.74.443", + "name": "SSL_RESULT_195" + }, + { + "Tuple4": "192.168.50.33.54638>142.250.204.110.443", + "name": "SSL_RESULT_196" + }, + { + "Tuple4": "192.168.50.33.63347>142.250.66.131.443", + "name": "SSL_RESULT_197" + }, + { + "Tuple4": "192.168.50.52.1079>40.119.211.203.443", + "name": "SSL_RESULT_198" + }, + { + "Tuple4": "192.168.50.52.17311>142.250.66.99.443", + "ssl_sni": "www.gstatic.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", + "ssl_ja4s_hash": "t120200_1301_234ea6891581", + "name": "SSL_RESULT_199" + }, + { + "Tuple4": "192.168.50.52.14756>172.217.24.110.443", + "name": "SSL_RESULT_200" + }, + { + "Tuple4": "192.168.50.52.27956>40.90.189.152.443", + "name": "SSL_RESULT_201" + }, + { + "Tuple4": "192.168.50.52.17376>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "ssl_ja3s_hash": "16c0b3e6a7b8173c16d944cfeaeee9cf", + "ssl_ja4s_hash": "t1207h2_c02f_71e9615128b3", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "GlobalSign Atlas R3 OV TLS CA H2 2021;GlobalSign nv-sa;;;;;BE", + "ssl_cert_IssuerCN": "GlobalSign Atlas R3 OV TLS CA H2 2021", + "ssl_cert_IssuerO": "GlobalSign nv-sa", + "ssl_cert_IssuerC": "BE", + "ssl_cert_Sub": "sites.target.com;Target Corporation;;Minneapolis;;Minnesota;US", + "ssl_cert_SubCN": "sites.target.com", + "ssl_cert_SubO": "Target Corporation", + "ssl_cert_SubC": "US", + "ssl_cert_SubP": "Minnesota", + "ssl_cert_SubL": "Minneapolis", + "ssl_cert_SubAltName": "sites.target.com;affiliate.target.com;android.studioconnect.live;api.studioconnect.live;apollo-metrics.target.com;assethub.partnersonline.com;assethub.target.com;awesomeshop.target.com;bex.partnersonline.com;bex.target.com;cartster.target.com;cartwheel.target.com;cartwheelws-secure.target.com;circle.target.com;connect.roundel.com;connectedcommerce.target.com;corporate.target.com;developer.target.com;dojo.target.com;doppler.partnersonline.com;elevate.target.com;extgargantua.partnersonline.com;factorial.partnersonline.com;finds.target.com;gql.studioconnect.live;greenfield.partnersonline.com;greenfield.target.com;hrocdocrequest.target.com;iccon.target.com;incubator.target.com;india.target.com;ios.studioconnect.live;jira.target.com;launchpad.partnersonline.com;launchpad.target.com;leads.studioconnect.live;m.target.com;marketinghub.target.com;mercury.partnersonline.com;mickra.target.com;mickradashboard.target.com;mvs.partnersonline.com;mytime.target.com;nic.target;openhouse.target.com;opensource.target.com;osmosis.partnersonline.com;partnersonline.com;pcn.partnersonline.com;peg.partnersonline.com;photosubmission.target.com;pid.partnersonline.com;plus.target.com;pmworkorderadmin.partnersonline.com;poladmin.partnersonline.com;pop.partnersonline.com;qmp.partnersonline.com;qr.target.com;r2d2.target.com;rdmplus.target.com;recognize.target.com;redcard.target.com;redirect.studioconnect.live;rik.roundel.com;roundel.com;rubix.partnersonline.com;rubix.target.com;security.target.com;servicetech.target.com;sm.partnersonline.com;spark.partnersonline.com;spark.target.com;studioconnect.live;stylehub.target.com;synergy.partnersonline.com;target.com;targetmedianetwork.target.com;targetopenhouse.com;tepagent.target.com;tgt-files.target.com;tgtdriver.partnersonline.com;ti-event-prod.target.com;tiam.target.com;tiiam.target.com;tvi.partnersonline.com;viewpoint.target.com;weeklyad.target.com;www.partnersonline.com;www.roundel.com;www.target.com;www.targetopenhouse.com", + "ssl_cert_SerialNum": "0x012ede33fc9283773396e9b1ff995262", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "210928164609Z", + "ssl_cert_To": "221030164608Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", + "name": "SSL_RESULT_202" + }, + { + "Tuple4": "192.168.50.52.17384>220.181.174.102.443", + "ssl_sni": "securepubads.g.doubleclick.net", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "598872011444709307b861ae817a4b60", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_9b887d9acb53", + "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", + "ssl_ja4s_hash": "t120300_1301_6bbbaf601ed8", + "name": "SSL_RESULT_203" + }, + { + "Tuple4": "192.168.50.52.17427>172.217.31.2.443", + "ssl_sni": "pagead2.googlesyndication.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "598872011444709307b861ae817a4b60", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_9b887d9acb53", + "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", + "ssl_ja4s_hash": "t120300_1301_6bbbaf601ed8", + "name": "SSL_RESULT_204" + }, + { + "Tuple4": "192.168.50.52.17381>23.57.114.38.443", + "ssl_sni": "js-sec.indexww.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "ssl_ja3s_hash": "410b9bedaf65dd26c6fe547154d60db4", + "ssl_ja4s_hash": "t1202h1_c030_bc98f8e001b5", + "name": "SSL_RESULT_205" + }, + { + "Tuple4": "192.168.50.52.17432>220.181.174.102.443", + "ssl_sni": "securepubads.g.doubleclick.net", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "598872011444709307b861ae817a4b60", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_9b887d9acb53", + "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", + "ssl_ja4s_hash": "t120300_1301_6bbbaf601ed8", + "name": "SSL_RESULT_206" + }, + { + "Tuple4": "192.168.50.52.17434>15.197.193.217.443", + "ssl_sni": "match.adsrvr.org", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "ssl_ja3s_hash": "8d2a028aa94425f76ced7826b1f39039", + "ssl_ja4s_hash": "t1204h2_c02f_bec8bdbaef8a", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "GlobalSign GCC R3 DV TLS CA 2020;GlobalSign nv-sa;;;;;BE", + "ssl_cert_IssuerCN": "GlobalSign GCC R3 DV TLS CA 2020", + "ssl_cert_IssuerO": "GlobalSign nv-sa", + "ssl_cert_IssuerC": "BE", + "ssl_cert_Sub": "*.adsrvr.org;;;;;;", + "ssl_cert_SubCN": "*.adsrvr.org", + "ssl_cert_SubAltName": "*.adsrvr.org;adsrvr.org", + "ssl_cert_SerialNum": "0x2ddaa6f359d4ce458fe983f1", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "220331203750Z", + "ssl_cert_To": "230502203749Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", + "name": "SSL_RESULT_207" + }, + { + "Tuple4": "192.168.50.52.17375>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "ssl_ja3s_hash": "16c0b3e6a7b8173c16d944cfeaeee9cf", + "ssl_ja4s_hash": "t1207h2_c02f_71e9615128b3", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "GlobalSign Atlas R3 OV TLS CA H2 2021;GlobalSign nv-sa;;;;;BE", + "ssl_cert_IssuerCN": "GlobalSign Atlas R3 OV TLS CA H2 2021", + "ssl_cert_IssuerO": "GlobalSign nv-sa", + "ssl_cert_IssuerC": "BE", + "ssl_cert_Sub": "sites.target.com;Target Corporation;;Minneapolis;;Minnesota;US", + "ssl_cert_SubCN": "sites.target.com", + "ssl_cert_SubO": "Target Corporation", + "ssl_cert_SubC": "US", + "ssl_cert_SubP": "Minnesota", + "ssl_cert_SubL": "Minneapolis", + "ssl_cert_SubAltName": "sites.target.com;affiliate.target.com;android.studioconnect.live;api.studioconnect.live;apollo-metrics.target.com;assethub.partnersonline.com;assethub.target.com;awesomeshop.target.com;bex.partnersonline.com;bex.target.com;cartster.target.com;cartwheel.target.com;cartwheelws-secure.target.com;circle.target.com;connect.roundel.com;connectedcommerce.target.com;corporate.target.com;developer.target.com;dojo.target.com;doppler.partnersonline.com;elevate.target.com;extgargantua.partnersonline.com;factorial.partnersonline.com;finds.target.com;gql.studioconnect.live;greenfield.partnersonline.com;greenfield.target.com;hrocdocrequest.target.com;iccon.target.com;incubator.target.com;india.target.com;ios.studioconnect.live;jira.target.com;launchpad.partnersonline.com;launchpad.target.com;leads.studioconnect.live;m.target.com;marketinghub.target.com;mercury.partnersonline.com;mickra.target.com;mickradashboard.target.com;mvs.partnersonline.com;mytime.target.com;nic.target;openhouse.target.com;opensource.target.com;osmosis.partnersonline.com;partnersonline.com;pcn.partnersonline.com;peg.partnersonline.com;photosubmission.target.com;pid.partnersonline.com;plus.target.com;pmworkorderadmin.partnersonline.com;poladmin.partnersonline.com;pop.partnersonline.com;qmp.partnersonline.com;qr.target.com;r2d2.target.com;rdmplus.target.com;recognize.target.com;redcard.target.com;redirect.studioconnect.live;rik.roundel.com;roundel.com;rubix.partnersonline.com;rubix.target.com;security.target.com;servicetech.target.com;sm.partnersonline.com;spark.partnersonline.com;spark.target.com;studioconnect.live;stylehub.target.com;synergy.partnersonline.com;target.com;targetmedianetwork.target.com;targetopenhouse.com;tepagent.target.com;tgt-files.target.com;tgtdriver.partnersonline.com;ti-event-prod.target.com;tiam.target.com;tiiam.target.com;tvi.partnersonline.com;viewpoint.target.com;weeklyad.target.com;www.partnersonline.com;www.roundel.com;www.target.com;www.targetopenhouse.com", + "ssl_cert_SerialNum": "0x012ede33fc9283773396e9b1ff995262", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "210928164609Z", + "ssl_cert_To": "221030164608Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", + "name": "SSL_RESULT_208" + }, + { + "Tuple4": "192.168.50.52.17433>3.217.136.163.443", + "ssl_sni": "idx.liadm.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "ssl_ja3s_hash": "303951d4c50efb2e991652225a6f02b1", + "ssl_ja4s_hash": "t120200_c02f_344b4dce5a52", + "name": "SSL_RESULT_209" + }, + { + "Tuple4": "192.168.50.52.17437>3.217.136.163.443", + "ssl_sni": "idx.liadm.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_e5627efa2ab1", + "ssl_ja3s_hash": "303951d4c50efb2e991652225a6f02b1", + "ssl_ja4s_hash": "t120200_c02f_344b4dce5a52", + "name": "SSL_RESULT_210" + }, + { + "Tuple4": "192.168.50.52.17544>142.250.207.74.443", + "ssl_sni": "content-autofill.googleapis.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "598872011444709307b861ae817a4b60", + "ssl_ja4_hash": "t13d1516h2_8daaf6152771_9b887d9acb53", + "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", + "ssl_ja4s_hash": "t120300_1301_6bbbaf601ed8", + "name": "SSL_RESULT_211" + }, + { + "Tuple4": "192.168.50.57.54160>39.105.29.36.443", + "name": "SSL_RESULT_212" + }, + { + "Tuple4": "192.168.50.57.54162>39.105.29.36.443", + "name": "SSL_RESULT_213" + } +]
\ No newline at end of file diff --git a/test/ssl_test_plug.cpp b/test/ssl_test_plug.cpp index 0d3b071..ec2ceec 100644 --- a/test/ssl_test_plug.cpp +++ b/test/ssl_test_plug.cpp @@ -100,15 +100,24 @@ extern "C" unsigned char SSL_TEST_PLUG_ENTRY(stSessionInfo *session_info, void * cJSON_AddStringToObject(ctx, "ssl_client_version", ssl_get_version_name(a_ssl->chello->version)); } - if(strlen(a_ssl->chello->ja3.md5) >0 && a_ssl->chello->ja3.md5_len > 0) + if(strlen(a_ssl->chello->ja3.value) >0) { - cJSON_AddStringToObject(ctx, "ssl_ja3_hash", a_ssl->chello->ja3.md5); + cJSON_AddStringToObject(ctx, "ssl_ja3_hash", a_ssl->chello->ja3.value); + } + + if(strlen(a_ssl->chello->ja4.value) >0) + { + cJSON_AddStringToObject(ctx, "ssl_ja4_hash", a_ssl->chello->ja4.value); } break; case SSL_SERVER_HELLO: - if (a_ssl->shello->ja3s.md5 != NULL && a_ssl->shello->ja3s.md5_len > 0) + if(strlen(a_ssl->shello->ja3s.value) >0) + { + cJSON_AddStringToObject(ctx, "ssl_ja3s_hash", a_ssl->shello->ja3s.value); + } + if(strlen(a_ssl->shello->ja4s.value) >0) { - cJSON_AddStringToObject(ctx, "ssl_ja3s_hash", a_ssl->shello->ja3s.md5); + cJSON_AddStringToObject(ctx, "ssl_ja4s_hash", a_ssl->shello->ja4s.value); } break; case SSL_CERTIFICATE_DETAIL: |