From 21950877e691e1b52038d6cffa3914b944c9dfe9 Mon Sep 17 00:00:00 2001 From: 刘学利 Date: Mon, 3 Jul 2023 13:39:18 +0000 Subject: 代码重构,性能优化 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- test/CMakeLists.txt | 2 + ...ssl-192.168.50.52.17434.15.197.193.217.443.pcap | Bin 0 -> 7211 bytes test/pcap/bug/ssl_bug_result.json | 24 + test/pcap/e21/ssl_e21_target_result.json | 4 +- test/pcap/multiple_handshake/3-ssl-with-cert.pcap | Bin 0 -> 203193 bytes .../ssl_multiple_handshake_result.json | 21 + test/pcap/ssl/ssl_result.json | 3 +- test/pcap/xxg/ssl_xxg_target_result.json | 2556 ++++++++++---------- test/ssl_result.json | 32 + test/ssl_test_plug.cpp | 178 +- 10 files changed, 1446 insertions(+), 1374 deletions(-) create mode 100644 test/pcap/bug/ssl-192.168.50.52.17434.15.197.193.217.443.pcap create mode 100644 test/pcap/bug/ssl_bug_result.json create mode 100644 test/pcap/multiple_handshake/3-ssl-with-cert.pcap create mode 100644 test/pcap/multiple_handshake/ssl_multiple_handshake_result.json create mode 100644 test/ssl_result.json (limited to 'test') diff --git a/test/CMakeLists.txt b/test/CMakeLists.txt index d982b1b..0286461 100644 --- a/test/CMakeLists.txt +++ b/test/CMakeLists.txt @@ -40,3 +40,5 @@ add_test(NAME COPY_TEST_SO COMMAND sh -c "cp ${CMAKE_CURRENT_BINARY_DIR}/${lib_n add_test(NAME RUN_SSL_TEST COMMAND proto_test_main ${CMAKE_CURRENT_SOURCE_DIR}/pcap/ssl/ssl_result.json -f "find ${CMAKE_CURRENT_SOURCE_DIR}/pcap/ssl -name *.pcap|sort -V" WORKING_DIRECTORY ${PROTO_TEST_RUN_DIR}) add_test(NAME RUN_E21_BUG_E21_TEST COMMAND proto_test_main ${CMAKE_CURRENT_SOURCE_DIR}/pcap/e21/ssl_e21_target_result.json -f "find ${CMAKE_CURRENT_SOURCE_DIR}/pcap/e21/ -name *.pcap|sort -V" WORKING_DIRECTORY ${PROTO_TEST_RUN_DIR}) add_test(NAME RUN_E21_BUG_XXG_TEST COMMAND proto_test_main ${CMAKE_CURRENT_SOURCE_DIR}/pcap/xxg/ssl_xxg_target_result.json -f "find ${CMAKE_CURRENT_SOURCE_DIR}/pcap/xxg/ -name *.pcap|sort -V" WORKING_DIRECTORY ${PROTO_TEST_RUN_DIR}) +add_test(NAME RUN_BUG_TEST COMMAND proto_test_main ${CMAKE_CURRENT_SOURCE_DIR}/pcap/bug/ssl_bug_result.json -f "find ${CMAKE_CURRENT_SOURCE_DIR}/pcap/bug/ -name *.pcap|sort -V" WORKING_DIRECTORY ${PROTO_TEST_RUN_DIR}) +add_test(NAME RUN_MULTIPLE_HANDSHAKE_TEST COMMAND proto_test_main ${CMAKE_CURRENT_SOURCE_DIR}/pcap/multiple_handshake/ssl_multiple_handshake_result.json -f "find ${CMAKE_CURRENT_SOURCE_DIR}/pcap/multiple_handshake/ -name *.pcap|sort -V" WORKING_DIRECTORY ${PROTO_TEST_RUN_DIR}) diff --git a/test/pcap/bug/ssl-192.168.50.52.17434.15.197.193.217.443.pcap b/test/pcap/bug/ssl-192.168.50.52.17434.15.197.193.217.443.pcap new file mode 100644 index 0000000..56a1224 Binary files /dev/null and b/test/pcap/bug/ssl-192.168.50.52.17434.15.197.193.217.443.pcap differ diff --git a/test/pcap/bug/ssl_bug_result.json b/test/pcap/bug/ssl_bug_result.json new file mode 100644 index 0000000..fabe97f --- /dev/null +++ b/test/pcap/bug/ssl_bug_result.json @@ -0,0 +1,24 @@ +[ + { + "Tuple4": "192.168.50.52.17434>15.197.193.217.443", + "ssl_sni": "match.adsrvr.org", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja3s_hash": "8d2a028aa94425f76ced7826b1f39039", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "GlobalSign GCC R3 DV TLS CA 2020;GlobalSign nv-sa;;;;;BE", + "ssl_cert_IssuerCN": "GlobalSign GCC R3 DV TLS CA 2020", + "ssl_cert_IssuerO": "GlobalSign nv-sa", + "ssl_cert_IssuerC": "BE", + "ssl_cert_Sub": "*.adsrvr.org;;;;;;", + "ssl_cert_SubCN": "*.adsrvr.org", + "ssl_cert_SubCN": "*.adsrvr.org", + "ssl_cert_SubAltName": "*.adsrvr.org;adsrvr.org", + "ssl_cert_SerialNum": "0x2ddaa6f359d4ce458fe983f1", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "220331203750Z", + "ssl_cert_To": "230502203749Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", + "name": "SSL_RESULT_1" + } +] diff --git a/test/pcap/e21/ssl_e21_target_result.json b/test/pcap/e21/ssl_e21_target_result.json index 0244e56..ff62115 100644 --- a/test/pcap/e21/ssl_e21_target_result.json +++ b/test/pcap/e21/ssl_e21_target_result.json @@ -105,6 +105,7 @@ "ssl_cert_AgID": "1.2.840.113549.1.1.11", "ssl_cert_From": "210928164609Z", "ssl_cert_To": "221030164608Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", "name": "SSL_RESULT_13" }, { @@ -130,6 +131,7 @@ "ssl_cert_AgID": "1.2.840.113549.1.1.11", "ssl_cert_From": "210928164609Z", "ssl_cert_To": "221030164608Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", "name": "SSL_RESULT_14" }, { @@ -496,4 +498,4 @@ "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", "name": "SSL_RESULT_66" } -] \ No newline at end of file +] diff --git a/test/pcap/multiple_handshake/3-ssl-with-cert.pcap b/test/pcap/multiple_handshake/3-ssl-with-cert.pcap new file mode 100644 index 0000000..d386c5a Binary files /dev/null and b/test/pcap/multiple_handshake/3-ssl-with-cert.pcap differ diff --git a/test/pcap/multiple_handshake/ssl_multiple_handshake_result.json b/test/pcap/multiple_handshake/ssl_multiple_handshake_result.json new file mode 100644 index 0000000..8d46be2 --- /dev/null +++ b/test/pcap/multiple_handshake/ssl_multiple_handshake_result.json @@ -0,0 +1,21 @@ +[{ + "Tuple4": "192.168.32.27.52705>202.89.233.101.443", + "ssl_sni": "cn.bing.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja3s_hash": "67bfe5d15ae567fb35fd7837f0116eec", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "Microsoft RSA TLS CA 02;Microsoft Corporation;;;;;US", + "ssl_cert_IssuerCN": "Microsoft RSA TLS CA 02", + "ssl_cert_IssuerO": "Microsoft Corporation", + "ssl_cert_IssuerC": "US", + "ssl_cert_Sub": "www.bing.com;;;;;;", + "ssl_cert_SubCN": "www.bing.com", + "ssl_cert_SubAltName": "www.bing.com;dict.bing.com.cn;*.platform.bing.com;*.bing.com;bing.com;ieonline.microsoft.com;*.windowssearch.com;cn.ieonline.microsoft.com;*.origin.bing.com;*.mm.bing.net;*.api.bing.com;ecn.dev.virtualearth.net;*.cn.bing.net;*.cn.bing.com;ssl-api.bing.com;ssl-api.bing.net;*.api.bing.net;*.bingapis.com;bingsandbox.com;feedback.microsoft.com;insertmedia.bing.office.net;r.bat.bing.com;*.r.bat.bing.com;*.dict.bing.com.cn;*.dict.bing.com;*.ssl.bing.com;*.appex.bing.com;*.platform.cn.bing.com;wp.m.bing.com;*.m.bing.com;global.bing.com;windowssearch.com;search.msn.com;*.bingsandbox.com;*.api.tiles.ditu.live.com;*.ditu.live.com;*.t0.tiles.ditu.live.com;*.t1.tiles.ditu.live.com;*.t2.tiles.ditu.live.com;*.t3.tiles.ditu.live.com;*.tiles.ditu.live.com;3d.live.com;api.search.live.com;beta.search.live.com;cnweb.search.live.com;dev.live.com;ditu.live.com;farecast.live.com;image.live.com;images.live.com;local.live.com.au;localsearch.live.com;ls4d.search.live.com;mail.live.com;mapindia.live.com;local.live.com;maps.live.com;maps.live.com.au;mindia.live.com;news.live.com;origin.cnweb.search.live.com;preview.local.live.com;search.live.com;test.maps.live.com;video.live.com;videos.live.com;virtualearth.live.com;wap.live.com;webmaster.live.com;webmasters.live.com;www.local.live.com.au;www.maps.live.com.au", + "ssl_cert_SerialNum": "0x7f0012e261129541195fac1a6000000012e261", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "210706015313Z", + "ssl_cert_To": "220106015313Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", + "name": "SSL_RESULT_1" +}] diff --git a/test/pcap/ssl/ssl_result.json b/test/pcap/ssl/ssl_result.json index e1857f0..ed7d862 100644 --- a/test/pcap/ssl/ssl_result.json +++ b/test/pcap/ssl/ssl_result.json @@ -36,6 +36,7 @@ "ssl_cert_AgID": "1.2.840.113549.1.1.11", "ssl_cert_From": "180717083809Z", "ssl_cert_To": "190714162604Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", "name": "SSL_RESULT_3" }, { "Tuple4": "192.168.2.102.56776>34.138.246.121.443", @@ -45,4 +46,4 @@ "ssl_ja3_hash": "a195b9c006fcb23ab9a2343b0871e362", "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", "name": "SSL_RESULT_4" -}] \ No newline at end of file +}] diff --git a/test/pcap/xxg/ssl_xxg_target_result.json b/test/pcap/xxg/ssl_xxg_target_result.json index 0bcca97..3fc12c0 100644 --- a/test/pcap/xxg/ssl_xxg_target_result.json +++ b/test/pcap/xxg/ssl_xxg_target_result.json @@ -1,1279 +1,1279 @@ [{ - "Tuple4": "192.168.50.33.51933>54.230.21.91.443", - "name": "SSL_RESULT_1" -}, { - "Tuple4": "192.168.50.52.17312>142.250.66.99.443", - "ssl_sni": "www.gstatic.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", - "name": "SSL_RESULT_2" -}, { - "Tuple4": "192.168.50.52.17311>142.250.66.99.443", - "ssl_sni": "www.gstatic.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", - "name": "SSL_RESULT_3" -}, { - "Tuple4": "192.168.50.52.17313>142.250.66.99.443", - "ssl_sni": "www.gstatic.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", - "name": "SSL_RESULT_4" -}, { - "Tuple4": "192.168.50.52.17330>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_5" -}, { - "Tuple4": "192.168.50.52.17332>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_6" -}, { - "Tuple4": "192.168.50.52.17331>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_7" -}, { - "Tuple4": "192.168.50.52.17335>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_8" -}, { - "Tuple4": "192.168.50.52.17337>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_9" -}, { - "Tuple4": "192.168.50.52.17336>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_10" -}, { - "Tuple4": "192.168.50.52.17339>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_11" -}, { - "Tuple4": "192.168.50.52.17340>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_12" -}, { - "Tuple4": "192.168.50.33.63477>142.250.66.78.443", - "name": "SSL_RESULT_13" -}, { - "Tuple4": "192.168.50.52.17356>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_14" -}, { - "Tuple4": "192.168.50.52.17357>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_15" -}, { - "Tuple4": "192.168.50.52.17358>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_16" -}, { - "Tuple4": "192.168.50.52.17359>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_17" -}, { - "Tuple4": "192.168.50.33.50714>142.250.66.134.443", - "name": "SSL_RESULT_18" -}, { - "Tuple4": "192.168.50.52.17367>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_19" -}, { - "Tuple4": "192.168.50.52.17368>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_20" -}, { - "Tuple4": "192.168.50.52.17370>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_21" -}, { - "Tuple4": "192.168.50.52.17369>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_22" -}, { - "Tuple4": "192.168.50.52.17376>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "16c0b3e6a7b8173c16d944cfeaeee9cf", - "ssl_cert_version": "v3", - "ssl_cert_Issuer": "GlobalSign Atlas R3 OV TLS CA H2 2021;GlobalSign nv-sa;;;;;BE", - "ssl_cert_IssuerCN": "GlobalSign Atlas R3 OV TLS CA H2 2021", - "ssl_cert_IssuerO": "GlobalSign nv-sa", - "ssl_cert_IssuerC": "BE", - "ssl_cert_Sub": "sites.target.com;Target Corporation;;Minneapolis;;Minnesota;US", - "ssl_cert_SubCN": "sites.target.com", - "ssl_cert_SubO": "Target Corporation", - "ssl_cert_SubC": "US", - "ssl_cert_SubP": "Minnesota", - "ssl_cert_SubL": "Minneapolis", - "ssl_cert_SubCN": "sites.target.com", - "ssl_cert_SubAltName": "sites.target.com;affiliate.target.com;android.studioconnect.live;api.studioconnect.live;apollo-metrics.target.com;assethub.partnersonline.com;assethub.target.com;awesomeshop.target.com;bex.partnersonline.com;bex.target.com;cartster.target.com;cartwheel.target.com;cartwheelws-secure.target.com;circle.target.com;connect.roundel.com;connectedcommerce.target.com;corporate.target.com;developer.target.com;dojo.target.com;doppler.partnersonline.com;elevate.target.com;extgargantua.partnersonline.com;factorial.partnersonline.com;finds.target.com;gql.studioconnect.live;greenfield.partnersonline.com;greenfield.target.com;hrocdocrequest.target.com;iccon.target.com;incubator.target.com;india.target.com;ios.studioconnect.live;jira.target.com;launchpad.partnersonline.com;launchpad.target.com;leads.studioconnect.live;m.target.com;marketinghub.target.com;mercury.partnersonline.com;mickra.target.com;mickradashboard.target.com;mvs.partnersonline.com;mytime.target.com;nic.target;openhouse.target.com;opensource.target.com;osmosis.partnersonline.com;partnersonline.com;pcn.partnersonline.com;peg.partnersonline.com;photosubmission.target.com;pid.partnersonline.com;plus.target.com;pmworkorderadmin.partnersonline.com;poladmin.partnersonline.com;pop.partnersonline.com;qmp.partnersonline.com;qr.target.com;r2d2.target.com;rdmplus.target.com;recognize.target.com;redcard.target.com;redirect.studioconnect.live;rik.roundel.com;roundel.com;rubix.partnersonline.com;rubix.target.com;security.target.com;servicetech.target.com;sm.partnersonline.com;spark.partnersonline.com;spark.target.com;studioconnect.live;stylehub.target.com;synergy.partnersonline.com;target.com;targetmedianetwork.target.com;targetopenhouse.com;tepagent.target.com;tgt-files.target.com;tgtdriver.partnersonline.com;ti-event-prod.target.com;tiam.target.com;tiiam.target.com;tvi.partnersonline.com;viewpoint.target.com;weeklyad.target.com;www.partnersonline.com;www.roundel.com;www.target.com;www.targetopenhouse.com", - "ssl_cert_SerialNum": "0x012ede33fc9283773396e9b1ff995262", - "ssl_cert_AgID": "1.2.840.113549.1.1.11", - "ssl_cert_From": "210928164609Z", - "ssl_cert_To": "221030164608Z", - "name": "SSL_RESULT_23" -}, { - "Tuple4": "192.168.50.52.17378>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_24" -}, { - "Tuple4": "192.168.50.52.17379>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_25" -}, { - "Tuple4": "192.168.50.52.17383>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_26" -}, { - "Tuple4": "192.168.50.52.17382>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_27" -}, { - "Tuple4": "192.168.50.52.17385>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_28" -}, { - "Tuple4": "192.168.50.52.17389>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_29" -}, { - "Tuple4": "192.168.50.52.17387>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_30" -}, { - "Tuple4": "192.168.50.52.17386>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_31" -}, { - "Tuple4": "192.168.50.52.17390>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_32" -}, { - "Tuple4": "192.168.50.52.17391>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_33" -}, { - "Tuple4": "192.168.50.52.17392>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_34" -}, { - "Tuple4": "192.168.50.52.17395>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_35" -}, { - "Tuple4": "192.168.50.52.17393>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_36" -}, { - "Tuple4": "192.168.50.52.17396>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_37" -}, { - "Tuple4": "192.168.50.52.17394>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_38" -}, { - "Tuple4": "192.168.50.52.17397>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_39" -}, { - "Tuple4": "192.168.50.52.17398>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_40" -}, { - "Tuple4": "192.168.50.52.17403>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_41" -}, { - "Tuple4": "192.168.50.52.17402>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_42" -}, { - "Tuple4": "192.168.50.52.17405>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_43" -}, { - "Tuple4": "192.168.50.52.17404>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_44" -}, { - "Tuple4": "192.168.50.52.17406>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_45" -}, { - "Tuple4": "192.168.50.52.17407>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_46" -}, { - "Tuple4": "192.168.50.52.17409>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_47" -}, { - "Tuple4": "192.168.50.52.17408>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_48" -}, { - "Tuple4": "192.168.50.52.17413>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_49" -}, { - "Tuple4": "192.168.50.52.17412>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_50" -}, { - "Tuple4": "192.168.50.52.17415>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_51" -}, { - "Tuple4": "192.168.50.52.17416>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_52" -}, { - "Tuple4": "192.168.50.52.17421>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_53" -}, { - "Tuple4": "192.168.50.52.17420>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_54" -}, { - "Tuple4": "192.168.50.52.17422>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_55" -}, { - "Tuple4": "192.168.50.52.17423>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_56" -}, { - "Tuple4": "192.168.50.52.17424>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_57" -}, { - "Tuple4": "192.168.50.52.17429>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_58" -}, { - "Tuple4": "192.168.50.52.17430>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_59" -}, { - "Tuple4": "192.168.50.52.17381>23.57.114.38.443", - "ssl_sni": "js-sec.indexww.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "410b9bedaf65dd26c6fe547154d60db4", - "name": "SSL_RESULT_60" -}, { - "Tuple4": "192.168.50.52.17380>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_61" -}, { - "Tuple4": "192.168.50.52.17438>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_62" -}, { - "Tuple4": "192.168.50.52.17388>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_63" -}, { - "Tuple4": "192.168.50.52.17439>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_64" -}, { - "Tuple4": "192.168.50.52.17401>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_65" -}, { - "Tuple4": "192.168.50.52.17400>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_66" -}, { - "Tuple4": "192.168.50.52.17440>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_67" -}, { - "Tuple4": "192.168.50.52.17442>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_68" -}, { - "Tuple4": "192.168.50.52.17443>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_69" -}, { - "Tuple4": "192.168.50.52.17441>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_70" -}, { - "Tuple4": "192.168.50.52.17410>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_71" -}, { - "Tuple4": "192.168.50.52.17444>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_72" -}, { - "Tuple4": "192.168.50.52.17445>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_73" -}, { - "Tuple4": "192.168.50.52.17419>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_74" -}, { - "Tuple4": "192.168.50.52.17417>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_75" -}, { - "Tuple4": "192.168.50.52.17414>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_76" -}, { - "Tuple4": "192.168.50.52.17411>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_77" -}, { - "Tuple4": "192.168.50.52.17448>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_78" -}, { - "Tuple4": "192.168.50.52.17449>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_79" -}, { - "Tuple4": "192.168.50.52.17451>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_80" -}, { - "Tuple4": "192.168.50.52.17452>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_81" -}, { - "Tuple4": "192.168.50.52.17453>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_82" -}, { - "Tuple4": "192.168.50.52.17454>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_83" -}, { - "Tuple4": "192.168.50.52.17455>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_84" -}, { - "Tuple4": "192.168.50.52.17425>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_85" -}, { - "Tuple4": "192.168.50.52.17426>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_86" -}, { - "Tuple4": "192.168.50.52.17456>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_87" -}, { - "Tuple4": "192.168.50.52.17457>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_88" -}, { - "Tuple4": "192.168.50.52.17458>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_89" -}, { - "Tuple4": "192.168.50.52.17459>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_90" -}, { - "Tuple4": "192.168.50.52.17428>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_91" -}, { - "Tuple4": "192.168.50.52.17460>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_92" -}, { - "Tuple4": "192.168.50.52.17461>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_93" -}, { - "Tuple4": "192.168.50.52.17462>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_94" -}, { - "Tuple4": "192.168.50.52.17464>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_95" -}, { - "Tuple4": "192.168.50.52.17463>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_96" -}, { - "Tuple4": "192.168.50.52.17466>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_97" -}, { - "Tuple4": "192.168.50.52.17465>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_98" -}, { - "Tuple4": "192.168.50.52.17468>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_99" -}, { - "Tuple4": "192.168.50.52.17431>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_100" -}, { - "Tuple4": "192.168.50.52.17469>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_101" -}, { - "Tuple4": "192.168.50.52.17470>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_102" -}, { - "Tuple4": "192.168.50.52.17473>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_103" -}, { - "Tuple4": "192.168.50.52.17474>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_104" -}, { - "Tuple4": "192.168.50.52.17471>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_105" -}, { - "Tuple4": "192.168.50.52.17472>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_106" -}, { - "Tuple4": "192.168.50.52.17475>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_107" -}, { - "Tuple4": "192.168.50.52.17476>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_108" -}, { - "Tuple4": "192.168.50.52.17477>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_109" -}, { - "Tuple4": "192.168.50.52.17481>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_110" -}, { - "Tuple4": "192.168.50.52.17479>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_111" -}, { - "Tuple4": "192.168.50.52.17483>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_112" -}, { - "Tuple4": "192.168.50.52.17484>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_113" -}, { - "Tuple4": "192.168.50.52.17485>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_114" -}, { - "Tuple4": "192.168.50.52.17486>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_115" -}, { - "Tuple4": "192.168.50.52.17487>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_116" -}, { - "Tuple4": "192.168.50.52.17488>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_117" -}, { - "Tuple4": "192.168.50.52.17490>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_118" -}, { - "Tuple4": "192.168.50.52.17491>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_119" -}, { - "Tuple4": "192.168.50.52.17492>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_120" -}, { - "Tuple4": "192.168.50.52.17493>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_121" -}, { - "Tuple4": "192.168.50.52.17494>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_122" -}, { - "Tuple4": "192.168.50.52.17495>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_123" -}, { - "Tuple4": "192.168.50.52.17496>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_124" -}, { - "Tuple4": "192.168.50.52.17497>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_125" -}, { - "Tuple4": "192.168.50.52.17498>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_126" -}, { - "Tuple4": "192.168.50.52.17499>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_127" -}, { - "Tuple4": "192.168.50.52.17500>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_128" -}, { - "Tuple4": "192.168.50.52.17501>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_129" -}, { - "Tuple4": "192.168.50.52.17502>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_130" -}, { - "Tuple4": "192.168.50.52.17503>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_131" -}, { - "Tuple4": "192.168.50.52.17504>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_132" -}, { - "Tuple4": "192.168.50.52.17505>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_133" -}, { - "Tuple4": "192.168.50.52.17506>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_134" -}, { - "Tuple4": "192.168.50.52.17507>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_135" -}, { - "Tuple4": "192.168.50.52.17508>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_136" -}, { - "Tuple4": "192.168.50.52.17509>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_137" -}, { - "Tuple4": "192.168.50.52.17511>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_138" -}, { - "Tuple4": "192.168.50.52.17510>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_139" -}, { - "Tuple4": "192.168.50.52.17512>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_140" -}, { - "Tuple4": "192.168.50.52.17513>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_141" -}, { - "Tuple4": "192.168.50.52.17514>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_142" -}, { - "Tuple4": "192.168.50.52.17515>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_143" -}, { - "Tuple4": "192.168.50.52.17516>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_144" -}, { - "Tuple4": "192.168.50.52.17519>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_145" -}, { - "Tuple4": "192.168.50.52.17518>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_146" -}, { - "Tuple4": "192.168.50.52.17520>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_147" -}, { - "Tuple4": "192.168.50.52.17521>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_148" -}, { - "Tuple4": "192.168.50.52.17522>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_149" -}, { - "Tuple4": "192.168.50.52.17523>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_150" -}, { - "Tuple4": "192.168.50.52.17524>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_151" -}, { - "Tuple4": "192.168.50.52.17526>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_152" -}, { - "Tuple4": "192.168.50.52.17525>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_153" -}, { - "Tuple4": "192.168.50.52.17527>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_154" -}, { - "Tuple4": "192.168.50.52.17528>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_155" -}, { - "Tuple4": "192.168.50.52.17529>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_156" -}, { - "Tuple4": "192.168.50.52.17530>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_157" -}, { - "Tuple4": "192.168.50.52.17446>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_158" -}, { - "Tuple4": "192.168.50.52.17418>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_159" -}, { - "Tuple4": "192.168.50.52.17447>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_160" -}, { - "Tuple4": "192.168.50.52.17531>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_161" -}, { - "Tuple4": "192.168.50.52.17450>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_162" -}, { - "Tuple4": "192.168.50.52.17532>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_163" -}, { - "Tuple4": "192.168.50.52.17533>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_164" -}, { - "Tuple4": "192.168.50.52.17480>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_165" -}, { - "Tuple4": "192.168.50.52.17478>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_166" -}, { - "Tuple4": "192.168.50.52.17482>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_167" -}, { - "Tuple4": "192.168.50.52.17534>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_168" -}, { - "Tuple4": "192.168.50.52.17536>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_169" -}, { - "Tuple4": "192.168.50.52.17517>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_170" -}, { - "Tuple4": "192.168.50.52.17540>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_171" -}, { - "Tuple4": "192.168.50.52.17399>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_172" -}, { - "Tuple4": "192.168.50.52.17541>23.57.112.179.443", - "ssl_sni": "target.scene7.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_173" -}, { - "Tuple4": "192.168.50.52.17535>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_174" -}, { - "Tuple4": "192.168.50.52.17542>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_175" -}, { - "Tuple4": "192.168.50.52.17543>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_176" -}, { - "Tuple4": "192.168.50.52.17545>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_177" -}, { - "Tuple4": "192.168.50.52.17546>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_178" -}, { - "Tuple4": "192.168.50.52.17547>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_179" -}, { - "Tuple4": "192.168.50.52.17548>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_180" -}, { - "Tuple4": "192.168.50.52.17549>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_181" -}, { - "Tuple4": "192.168.50.52.17550>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_182" -}, { - "Tuple4": "192.168.50.52.17551>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_183" -}, { - "Tuple4": "192.168.50.52.17552>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_184" -}, { - "Tuple4": "192.168.50.52.17554>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_185" -}, { - "Tuple4": "192.168.50.33.64967>54.230.21.91.443", - "name": "SSL_RESULT_186" -}, { - "Tuple4": "192.168.50.52.17553>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_187" -}, { - "Tuple4": "192.168.50.52.17555>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_188" -}, { - "Tuple4": "192.168.50.52.17559>151.101.130.180.443", - "ssl_sni": "assets.targetimg1.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "name": "SSL_RESULT_189" -}, { - "Tuple4": "192.168.50.33.57414>142.250.66.42.443", - "name": "SSL_RESULT_190" -}, { - "Tuple4": "192.168.50.33.60652>142.250.66.99.443", - "name": "SSL_RESULT_191" -}, { - "Tuple4": "192.168.50.33.58291>220.181.174.230.443", - "name": "SSL_RESULT_192" -}, { - "Tuple4": "192.168.50.33.50525>172.217.27.35.443", - "name": "SSL_RESULT_193" -}, { - "Tuple4": "192.168.50.33.56708>142.250.204.36.443", - "name": "SSL_RESULT_194" -}, { - "Tuple4": "192.168.50.33.55558>142.250.66.99.443", - "name": "SSL_RESULT_195" -}, { - "Tuple4": "192.168.50.33.65240>142.250.204.86.443", - "name": "SSL_RESULT_196" -}, { - "Tuple4": "192.168.50.33.57554>142.250.204.65.443", - "name": "SSL_RESULT_197" -}, { - "Tuple4": "192.168.50.33.65100>142.250.207.74.443", - "name": "SSL_RESULT_198" -}, { - "Tuple4": "192.168.50.33.54638>142.250.204.110.443", - "name": "SSL_RESULT_199" -}, { - "Tuple4": "192.168.50.33.63347>142.250.66.131.443", - "name": "SSL_RESULT_200" -}, { - "Tuple4": "192.168.50.52.1079>40.119.211.203.443", - "name": "SSL_RESULT_201" -}, { - "Tuple4": "192.168.50.52.14756>172.217.24.110.443", - "name": "SSL_RESULT_202" -}, { - "Tuple4": "192.168.50.52.27956>40.90.189.152.443", - "name": "SSL_RESULT_203" -}, { - "Tuple4": "192.168.50.52.17384>220.181.174.102.443", - "ssl_sni": "securepubads.g.doubleclick.net", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "598872011444709307b861ae817a4b60", - "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", - "name": "SSL_RESULT_204" -}, { - "Tuple4": "192.168.50.52.17427>172.217.31.2.443", - "ssl_sni": "pagead2.googlesyndication.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "598872011444709307b861ae817a4b60", - "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", - "name": "SSL_RESULT_205" -}, { - "Tuple4": "192.168.50.52.17432>220.181.174.102.443", - "ssl_sni": "securepubads.g.doubleclick.net", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "598872011444709307b861ae817a4b60", - "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", - "name": "SSL_RESULT_206" -}, { - "Tuple4": "192.168.50.52.17434>15.197.193.217.443", - "ssl_sni": "match.adsrvr.org", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "8d2a028aa94425f76ced7826b1f39039", - "ssl_cert_version": "v3", - "ssl_cert_Issuer": "GlobalSign GCC R3 DV TLS CA 2020;GlobalSign nv-sa;;;;;BE", - "ssl_cert_IssuerCN": "GlobalSign GCC R3 DV TLS CA 2020", - "ssl_cert_IssuerO": "GlobalSign nv-sa", - "ssl_cert_IssuerC": "BE", - "ssl_cert_Sub": "*.adsrvr.org;;;;;;", - "ssl_cert_SubCN": "*.adsrvr.org", - "ssl_cert_SubCN": "*.adsrvr.org", - "ssl_cert_SubAltName": "*.adsrvr.org;adsrvr.org", - "ssl_cert_SerialNum": "0x2ddaa6f359d4ce458fe983f1", - "ssl_cert_AgID": "1.2.840.113549.1.1.11", - "ssl_cert_From": "220331203750Z", - "ssl_cert_To": "230502203749Z", - "name": "SSL_RESULT_207" -}, { - "Tuple4": "192.168.50.52.17375>151.101.194.187.443", - "ssl_sni": "www.target.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "16c0b3e6a7b8173c16d944cfeaeee9cf", - "ssl_cert_version": "v3", - "ssl_cert_Issuer": "GlobalSign Atlas R3 OV TLS CA H2 2021;GlobalSign nv-sa;;;;;BE", - "ssl_cert_IssuerCN": "GlobalSign Atlas R3 OV TLS CA H2 2021", - "ssl_cert_IssuerO": "GlobalSign nv-sa", - "ssl_cert_IssuerC": "BE", - "ssl_cert_Sub": "sites.target.com;Target Corporation;;Minneapolis;;Minnesota;US", - "ssl_cert_SubCN": "sites.target.com", - "ssl_cert_SubO": "Target Corporation", - "ssl_cert_SubC": "US", - "ssl_cert_SubP": "Minnesota", - "ssl_cert_SubL": "Minneapolis", - "ssl_cert_SubCN": "sites.target.com", - "ssl_cert_SubAltName": "sites.target.com;affiliate.target.com;android.studioconnect.live;api.studioconnect.live;apollo-metrics.target.com;assethub.partnersonline.com;assethub.target.com;awesomeshop.target.com;bex.partnersonline.com;bex.target.com;cartster.target.com;cartwheel.target.com;cartwheelws-secure.target.com;circle.target.com;connect.roundel.com;connectedcommerce.target.com;corporate.target.com;developer.target.com;dojo.target.com;doppler.partnersonline.com;elevate.target.com;extgargantua.partnersonline.com;factorial.partnersonline.com;finds.target.com;gql.studioconnect.live;greenfield.partnersonline.com;greenfield.target.com;hrocdocrequest.target.com;iccon.target.com;incubator.target.com;india.target.com;ios.studioconnect.live;jira.target.com;launchpad.partnersonline.com;launchpad.target.com;leads.studioconnect.live;m.target.com;marketinghub.target.com;mercury.partnersonline.com;mickra.target.com;mickradashboard.target.com;mvs.partnersonline.com;mytime.target.com;nic.target;openhouse.target.com;opensource.target.com;osmosis.partnersonline.com;partnersonline.com;pcn.partnersonline.com;peg.partnersonline.com;photosubmission.target.com;pid.partnersonline.com;plus.target.com;pmworkorderadmin.partnersonline.com;poladmin.partnersonline.com;pop.partnersonline.com;qmp.partnersonline.com;qr.target.com;r2d2.target.com;rdmplus.target.com;recognize.target.com;redcard.target.com;redirect.studioconnect.live;rik.roundel.com;roundel.com;rubix.partnersonline.com;rubix.target.com;security.target.com;servicetech.target.com;sm.partnersonline.com;spark.partnersonline.com;spark.target.com;studioconnect.live;stylehub.target.com;synergy.partnersonline.com;target.com;targetmedianetwork.target.com;targetopenhouse.com;tepagent.target.com;tgt-files.target.com;tgtdriver.partnersonline.com;ti-event-prod.target.com;tiam.target.com;tiiam.target.com;tvi.partnersonline.com;viewpoint.target.com;weeklyad.target.com;www.partnersonline.com;www.roundel.com;www.target.com;www.targetopenhouse.com", - "ssl_cert_SerialNum": "0x012ede33fc9283773396e9b1ff995262", - "ssl_cert_AgID": "1.2.840.113549.1.1.11", - "ssl_cert_From": "210928164609Z", - "ssl_cert_To": "221030164608Z", - "name": "SSL_RESULT_208" -}, { - "Tuple4": "192.168.50.52.17433>3.217.136.163.443", - "ssl_sni": "idx.liadm.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "303951d4c50efb2e991652225a6f02b1", - "name": "SSL_RESULT_209" -}, { - "Tuple4": "192.168.50.52.17437>3.217.136.163.443", - "ssl_sni": "idx.liadm.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", - "ssl_ja3s_hash": "303951d4c50efb2e991652225a6f02b1", - "name": "SSL_RESULT_210" -}, { - "Tuple4": "192.168.50.52.17544>142.250.207.74.443", - "ssl_sni": "content-autofill.googleapis.com", - "ssl_client_version": "TLS1.2", - "ssl_ja3_hash": "598872011444709307b861ae817a4b60", - "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", - "name": "SSL_RESULT_211" -}, { - "Tuple4": "192.168.50.57.54160>39.105.29.36.443", - "name": "SSL_RESULT_212" -}, { - "Tuple4": "192.168.50.57.54162>39.105.29.36.443", - "name": "SSL_RESULT_213" -}] \ No newline at end of file + "Tuple4": "192.168.50.33.51933>54.230.21.91.443", + "name": "SSL_RESULT_1" + }, { + "Tuple4": "192.168.50.52.17312>142.250.66.99.443", + "ssl_sni": "www.gstatic.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", + "name": "SSL_RESULT_2" + }, { + "Tuple4": "192.168.50.52.17313>142.250.66.99.443", + "ssl_sni": "www.gstatic.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", + "name": "SSL_RESULT_3" + }, { + "Tuple4": "192.168.50.52.17330>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_4" + }, { + "Tuple4": "192.168.50.52.17332>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_5" + }, { + "Tuple4": "192.168.50.52.17331>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_6" + }, { + "Tuple4": "192.168.50.52.17335>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_7" + }, { + "Tuple4": "192.168.50.52.17337>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_8" + }, { + "Tuple4": "192.168.50.52.17336>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_9" + }, { + "Tuple4": "192.168.50.52.17339>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_10" + }, { + "Tuple4": "192.168.50.52.17340>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_11" + }, { + "Tuple4": "192.168.50.33.63477>142.250.66.78.443", + "name": "SSL_RESULT_12" + }, { + "Tuple4": "192.168.50.52.17356>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_13" + }, { + "Tuple4": "192.168.50.52.17357>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_14" + }, { + "Tuple4": "192.168.50.52.17358>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_15" + }, { + "Tuple4": "192.168.50.52.17359>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_16" + }, { + "Tuple4": "192.168.50.33.50714>142.250.66.134.443", + "name": "SSL_RESULT_17" + }, { + "Tuple4": "192.168.50.52.17367>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_18" + }, { + "Tuple4": "192.168.50.52.17368>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_19" + }, { + "Tuple4": "192.168.50.52.17370>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_20" + }, { + "Tuple4": "192.168.50.52.17369>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_21" + }, { + "Tuple4": "192.168.50.52.17378>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_22" + }, { + "Tuple4": "192.168.50.52.17379>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_23" + }, { + "Tuple4": "192.168.50.52.17383>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_24" + }, { + "Tuple4": "192.168.50.52.17382>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_25" + }, { + "Tuple4": "192.168.50.52.17385>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_26" + }, { + "Tuple4": "192.168.50.52.17389>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_27" + }, { + "Tuple4": "192.168.50.52.17387>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_28" + }, { + "Tuple4": "192.168.50.52.17386>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_29" + }, { + "Tuple4": "192.168.50.52.17390>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_30" + }, { + "Tuple4": "192.168.50.52.17391>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_31" + }, { + "Tuple4": "192.168.50.52.17392>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_32" + }, { + "Tuple4": "192.168.50.52.17395>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_33" + }, { + "Tuple4": "192.168.50.52.17393>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_34" + }, { + "Tuple4": "192.168.50.52.17396>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_35" + }, { + "Tuple4": "192.168.50.52.17394>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_36" + }, { + "Tuple4": "192.168.50.52.17397>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_37" + }, { + "Tuple4": "192.168.50.52.17398>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_38" + }, { + "Tuple4": "192.168.50.52.17403>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_39" + }, { + "Tuple4": "192.168.50.52.17402>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_40" + }, { + "Tuple4": "192.168.50.52.17405>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_41" + }, { + "Tuple4": "192.168.50.52.17404>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_42" + }, { + "Tuple4": "192.168.50.52.17406>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_43" + }, { + "Tuple4": "192.168.50.52.17407>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_44" + }, { + "Tuple4": "192.168.50.52.17409>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_45" + }, { + "Tuple4": "192.168.50.52.17408>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_46" + }, { + "Tuple4": "192.168.50.52.17413>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_47" + }, { + "Tuple4": "192.168.50.52.17412>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_48" + }, { + "Tuple4": "192.168.50.52.17415>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_49" + }, { + "Tuple4": "192.168.50.52.17416>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_50" + }, { + "Tuple4": "192.168.50.52.17421>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_51" + }, { + "Tuple4": "192.168.50.52.17420>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_52" + }, { + "Tuple4": "192.168.50.52.17422>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_53" + }, { + "Tuple4": "192.168.50.52.17423>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_54" + }, { + "Tuple4": "192.168.50.52.17424>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_55" + }, { + "Tuple4": "192.168.50.52.17429>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_56" + }, { + "Tuple4": "192.168.50.52.17430>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_57" + }, { + "Tuple4": "192.168.50.52.17380>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_58" + }, { + "Tuple4": "192.168.50.52.17438>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_59" + }, { + "Tuple4": "192.168.50.52.17388>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_60" + }, { + "Tuple4": "192.168.50.52.17439>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_61" + }, { + "Tuple4": "192.168.50.52.17401>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_62" + }, { + "Tuple4": "192.168.50.52.17400>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_63" + }, { + "Tuple4": "192.168.50.52.17440>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_64" + }, { + "Tuple4": "192.168.50.52.17442>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_65" + }, { + "Tuple4": "192.168.50.52.17443>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_66" + }, { + "Tuple4": "192.168.50.52.17441>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_67" + }, { + "Tuple4": "192.168.50.52.17410>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_68" + }, { + "Tuple4": "192.168.50.52.17444>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_69" + }, { + "Tuple4": "192.168.50.52.17445>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_70" + }, { + "Tuple4": "192.168.50.52.17419>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_71" + }, { + "Tuple4": "192.168.50.52.17417>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_72" + }, { + "Tuple4": "192.168.50.52.17414>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_73" + }, { + "Tuple4": "192.168.50.52.17411>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_74" + }, { + "Tuple4": "192.168.50.52.17448>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_75" + }, { + "Tuple4": "192.168.50.52.17449>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_76" + }, { + "Tuple4": "192.168.50.52.17451>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_77" + }, { + "Tuple4": "192.168.50.52.17452>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_78" + }, { + "Tuple4": "192.168.50.52.17453>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_79" + }, { + "Tuple4": "192.168.50.52.17454>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_80" + }, { + "Tuple4": "192.168.50.52.17455>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_81" + }, { + "Tuple4": "192.168.50.52.17425>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_82" + }, { + "Tuple4": "192.168.50.52.17426>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_83" + }, { + "Tuple4": "192.168.50.52.17456>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_84" + }, { + "Tuple4": "192.168.50.52.17457>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_85" + }, { + "Tuple4": "192.168.50.52.17458>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_86" + }, { + "Tuple4": "192.168.50.52.17459>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_87" + }, { + "Tuple4": "192.168.50.52.17428>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_88" + }, { + "Tuple4": "192.168.50.52.17460>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_89" + }, { + "Tuple4": "192.168.50.52.17461>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_90" + }, { + "Tuple4": "192.168.50.52.17462>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_91" + }, { + "Tuple4": "192.168.50.52.17464>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_92" + }, { + "Tuple4": "192.168.50.52.17463>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_93" + }, { + "Tuple4": "192.168.50.52.17466>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_94" + }, { + "Tuple4": "192.168.50.52.17465>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_95" + }, { + "Tuple4": "192.168.50.52.17468>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_96" + }, { + "Tuple4": "192.168.50.52.17431>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_97" + }, { + "Tuple4": "192.168.50.52.17469>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_98" + }, { + "Tuple4": "192.168.50.52.17470>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_99" + }, { + "Tuple4": "192.168.50.52.17473>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_100" + }, { + "Tuple4": "192.168.50.52.17474>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_101" + }, { + "Tuple4": "192.168.50.52.17471>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_102" + }, { + "Tuple4": "192.168.50.52.17472>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_103" + }, { + "Tuple4": "192.168.50.52.17475>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_104" + }, { + "Tuple4": "192.168.50.52.17476>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_105" + }, { + "Tuple4": "192.168.50.52.17477>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_106" + }, { + "Tuple4": "192.168.50.52.17481>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_107" + }, { + "Tuple4": "192.168.50.52.17479>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_108" + }, { + "Tuple4": "192.168.50.52.17483>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_109" + }, { + "Tuple4": "192.168.50.52.17484>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_110" + }, { + "Tuple4": "192.168.50.52.17485>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_111" + }, { + "Tuple4": "192.168.50.52.17486>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_112" + }, { + "Tuple4": "192.168.50.52.17487>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_113" + }, { + "Tuple4": "192.168.50.52.17488>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_114" + }, { + "Tuple4": "192.168.50.52.17490>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_115" + }, { + "Tuple4": "192.168.50.52.17491>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_116" + }, { + "Tuple4": "192.168.50.52.17492>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_117" + }, { + "Tuple4": "192.168.50.52.17493>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_118" + }, { + "Tuple4": "192.168.50.52.17494>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_119" + }, { + "Tuple4": "192.168.50.52.17495>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_120" + }, { + "Tuple4": "192.168.50.52.17496>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_121" + }, { + "Tuple4": "192.168.50.52.17497>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_122" + }, { + "Tuple4": "192.168.50.52.17498>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_123" + }, { + "Tuple4": "192.168.50.52.17499>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_124" + }, { + "Tuple4": "192.168.50.52.17500>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_125" + }, { + "Tuple4": "192.168.50.52.17501>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_126" + }, { + "Tuple4": "192.168.50.52.17502>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_127" + }, { + "Tuple4": "192.168.50.52.17503>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_128" + }, { + "Tuple4": "192.168.50.52.17504>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_129" + }, { + "Tuple4": "192.168.50.52.17505>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_130" + }, { + "Tuple4": "192.168.50.52.17506>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_131" + }, { + "Tuple4": "192.168.50.52.17507>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_132" + }, { + "Tuple4": "192.168.50.52.17508>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_133" + }, { + "Tuple4": "192.168.50.52.17509>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_134" + }, { + "Tuple4": "192.168.50.52.17511>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_135" + }, { + "Tuple4": "192.168.50.52.17510>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_136" + }, { + "Tuple4": "192.168.50.52.17512>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_137" + }, { + "Tuple4": "192.168.50.52.17513>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_138" + }, { + "Tuple4": "192.168.50.52.17514>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_139" + }, { + "Tuple4": "192.168.50.52.17515>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_140" + }, { + "Tuple4": "192.168.50.52.17516>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_141" + }, { + "Tuple4": "192.168.50.52.17519>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_142" + }, { + "Tuple4": "192.168.50.52.17518>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_143" + }, { + "Tuple4": "192.168.50.52.17520>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_144" + }, { + "Tuple4": "192.168.50.52.17521>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_145" + }, { + "Tuple4": "192.168.50.52.17522>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_146" + }, { + "Tuple4": "192.168.50.52.17523>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_147" + }, { + "Tuple4": "192.168.50.52.17524>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_148" + }, { + "Tuple4": "192.168.50.52.17526>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_149" + }, { + "Tuple4": "192.168.50.52.17525>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_150" + }, { + "Tuple4": "192.168.50.52.17527>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_151" + }, { + "Tuple4": "192.168.50.52.17528>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_152" + }, { + "Tuple4": "192.168.50.52.17529>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_153" + }, { + "Tuple4": "192.168.50.52.17530>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_154" + }, { + "Tuple4": "192.168.50.52.17446>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_155" + }, { + "Tuple4": "192.168.50.52.17418>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_156" + }, { + "Tuple4": "192.168.50.52.17447>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_157" + }, { + "Tuple4": "192.168.50.52.17531>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_158" + }, { + "Tuple4": "192.168.50.52.17450>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_159" + }, { + "Tuple4": "192.168.50.52.17532>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_160" + }, { + "Tuple4": "192.168.50.52.17533>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_161" + }, { + "Tuple4": "192.168.50.52.17480>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_162" + }, { + "Tuple4": "192.168.50.52.17478>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_163" + }, { + "Tuple4": "192.168.50.52.17482>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_164" + }, { + "Tuple4": "192.168.50.52.17534>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_165" + }, { + "Tuple4": "192.168.50.52.17536>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_166" + }, { + "Tuple4": "192.168.50.52.17517>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_167" + }, { + "Tuple4": "192.168.50.52.17540>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_168" + }, { + "Tuple4": "192.168.50.52.17399>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_169" + }, { + "Tuple4": "192.168.50.52.17541>23.57.112.179.443", + "ssl_sni": "target.scene7.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_170" + }, { + "Tuple4": "192.168.50.52.17535>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_171" + }, { + "Tuple4": "192.168.50.52.17542>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_172" + }, { + "Tuple4": "192.168.50.52.17543>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_173" + }, { + "Tuple4": "192.168.50.52.17545>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_174" + }, { + "Tuple4": "192.168.50.52.17546>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_175" + }, { + "Tuple4": "192.168.50.52.17547>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_176" + }, { + "Tuple4": "192.168.50.52.17548>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_177" + }, { + "Tuple4": "192.168.50.52.17549>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_178" + }, { + "Tuple4": "192.168.50.52.17550>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_179" + }, { + "Tuple4": "192.168.50.52.17551>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_180" + }, { + "Tuple4": "192.168.50.52.17552>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_181" + }, { + "Tuple4": "192.168.50.52.17554>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_182" + }, { + "Tuple4": "192.168.50.33.64967>54.230.21.91.443", + "name": "SSL_RESULT_183" + }, { + "Tuple4": "192.168.50.52.17553>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_184" + }, { + "Tuple4": "192.168.50.52.17555>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_185" + }, { + "Tuple4": "192.168.50.52.17559>151.101.130.180.443", + "ssl_sni": "assets.targetimg1.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "name": "SSL_RESULT_186" + }, { + "Tuple4": "192.168.50.33.57414>142.250.66.42.443", + "name": "SSL_RESULT_187" + }, { + "Tuple4": "192.168.50.33.60652>142.250.66.99.443", + "name": "SSL_RESULT_188" + }, { + "Tuple4": "192.168.50.33.58291>220.181.174.230.443", + "name": "SSL_RESULT_189" + }, { + "Tuple4": "192.168.50.33.50525>172.217.27.35.443", + "name": "SSL_RESULT_190" + }, { + "Tuple4": "192.168.50.33.56708>142.250.204.36.443", + "name": "SSL_RESULT_191" + }, { + "Tuple4": "192.168.50.33.55558>142.250.66.99.443", + "name": "SSL_RESULT_192" + }, { + "Tuple4": "192.168.50.33.65240>142.250.204.86.443", + "name": "SSL_RESULT_193" + }, { + "Tuple4": "192.168.50.33.57554>142.250.204.65.443", + "name": "SSL_RESULT_194" + }, { + "Tuple4": "192.168.50.33.65100>142.250.207.74.443", + "name": "SSL_RESULT_195" + }, { + "Tuple4": "192.168.50.33.54638>142.250.204.110.443", + "name": "SSL_RESULT_196" + }, { + "Tuple4": "192.168.50.33.63347>142.250.66.131.443", + "name": "SSL_RESULT_197" + }, { + "Tuple4": "192.168.50.52.1079>40.119.211.203.443", + "name": "SSL_RESULT_198" + }, { + "Tuple4": "192.168.50.52.17311>142.250.66.99.443", + "ssl_sni": "www.gstatic.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", + "name": "SSL_RESULT_199" + }, { + "Tuple4": "192.168.50.52.14756>172.217.24.110.443", + "name": "SSL_RESULT_200" + }, { + "Tuple4": "192.168.50.52.27956>40.90.189.152.443", + "name": "SSL_RESULT_201" + }, { + "Tuple4": "192.168.50.52.17376>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja3s_hash": "16c0b3e6a7b8173c16d944cfeaeee9cf", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "GlobalSign Atlas R3 OV TLS CA H2 2021;GlobalSign nv-sa;;;;;BE", + "ssl_cert_IssuerCN": "GlobalSign Atlas R3 OV TLS CA H2 2021", + "ssl_cert_IssuerO": "GlobalSign nv-sa", + "ssl_cert_IssuerC": "BE", + "ssl_cert_Sub": "sites.target.com;Target Corporation;;Minneapolis;;Minnesota;US", + "ssl_cert_SubCN": "sites.target.com", + "ssl_cert_SubO": "Target Corporation", + "ssl_cert_SubC": "US", + "ssl_cert_SubP": "Minnesota", + "ssl_cert_SubL": "Minneapolis", + "ssl_cert_SubAltName": "sites.target.com;affiliate.target.com;android.studioconnect.live;api.studioconnect.live;apollo-metrics.target.com;assethub.partnersonline.com;assethub.target.com;awesomeshop.target.com;bex.partnersonline.com;bex.target.com;cartster.target.com;cartwheel.target.com;cartwheelws-secure.target.com;circle.target.com;connect.roundel.com;connectedcommerce.target.com;corporate.target.com;developer.target.com;dojo.target.com;doppler.partnersonline.com;elevate.target.com;extgargantua.partnersonline.com;factorial.partnersonline.com;finds.target.com;gql.studioconnect.live;greenfield.partnersonline.com;greenfield.target.com;hrocdocrequest.target.com;iccon.target.com;incubator.target.com;india.target.com;ios.studioconnect.live;jira.target.com;launchpad.partnersonline.com;launchpad.target.com;leads.studioconnect.live;m.target.com;marketinghub.target.com;mercury.partnersonline.com;mickra.target.com;mickradashboard.target.com;mvs.partnersonline.com;mytime.target.com;nic.target;openhouse.target.com;opensource.target.com;osmosis.partnersonline.com;partnersonline.com;pcn.partnersonline.com;peg.partnersonline.com;photosubmission.target.com;pid.partnersonline.com;plus.target.com;pmworkorderadmin.partnersonline.com;poladmin.partnersonline.com;pop.partnersonline.com;qmp.partnersonline.com;qr.target.com;r2d2.target.com;rdmplus.target.com;recognize.target.com;redcard.target.com;redirect.studioconnect.live;rik.roundel.com;roundel.com;rubix.partnersonline.com;rubix.target.com;security.target.com;servicetech.target.com;sm.partnersonline.com;spark.partnersonline.com;spark.target.com;studioconnect.live;stylehub.target.com;synergy.partnersonline.com;target.com;targetmedianetwork.target.com;targetopenhouse.com;tepagent.target.com;tgt-files.target.com;tgtdriver.partnersonline.com;ti-event-prod.target.com;tiam.target.com;tiiam.target.com;tvi.partnersonline.com;viewpoint.target.com;weeklyad.target.com;www.partnersonline.com;www.roundel.com;www.target.com;www.targetopenhouse.com", + "ssl_cert_SerialNum": "0x012ede33fc9283773396e9b1ff995262", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "210928164609Z", + "ssl_cert_To": "221030164608Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", + "name": "SSL_RESULT_202" + }, { + "Tuple4": "192.168.50.52.17384>220.181.174.102.443", + "ssl_sni": "securepubads.g.doubleclick.net", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "598872011444709307b861ae817a4b60", + "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", + "name": "SSL_RESULT_203" + }, { + "Tuple4": "192.168.50.52.17427>172.217.31.2.443", + "ssl_sni": "pagead2.googlesyndication.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "598872011444709307b861ae817a4b60", + "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", + "name": "SSL_RESULT_204" + }, { + "Tuple4": "192.168.50.52.17381>23.57.114.38.443", + "ssl_sni": "js-sec.indexww.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja3s_hash": "410b9bedaf65dd26c6fe547154d60db4", + "name": "SSL_RESULT_205" + }, { + "Tuple4": "192.168.50.52.17432>220.181.174.102.443", + "ssl_sni": "securepubads.g.doubleclick.net", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "598872011444709307b861ae817a4b60", + "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", + "name": "SSL_RESULT_206" + }, { + "Tuple4": "192.168.50.52.17434>15.197.193.217.443", + "ssl_sni": "match.adsrvr.org", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja3s_hash": "8d2a028aa94425f76ced7826b1f39039", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "GlobalSign GCC R3 DV TLS CA 2020;GlobalSign nv-sa;;;;;BE", + "ssl_cert_IssuerCN": "GlobalSign GCC R3 DV TLS CA 2020", + "ssl_cert_IssuerO": "GlobalSign nv-sa", + "ssl_cert_IssuerC": "BE", + "ssl_cert_Sub": "*.adsrvr.org;;;;;;", + "ssl_cert_SubCN": "*.adsrvr.org", + "ssl_cert_SubAltName": "*.adsrvr.org;adsrvr.org", + "ssl_cert_SerialNum": "0x2ddaa6f359d4ce458fe983f1", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "220331203750Z", + "ssl_cert_To": "230502203749Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", + "name": "SSL_RESULT_207" + }, { + "Tuple4": "192.168.50.52.17375>151.101.194.187.443", + "ssl_sni": "www.target.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja3s_hash": "16c0b3e6a7b8173c16d944cfeaeee9cf", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "GlobalSign Atlas R3 OV TLS CA H2 2021;GlobalSign nv-sa;;;;;BE", + "ssl_cert_IssuerCN": "GlobalSign Atlas R3 OV TLS CA H2 2021", + "ssl_cert_IssuerO": "GlobalSign nv-sa", + "ssl_cert_IssuerC": "BE", + "ssl_cert_Sub": "sites.target.com;Target Corporation;;Minneapolis;;Minnesota;US", + "ssl_cert_SubCN": "sites.target.com", + "ssl_cert_SubO": "Target Corporation", + "ssl_cert_SubC": "US", + "ssl_cert_SubP": "Minnesota", + "ssl_cert_SubL": "Minneapolis", + "ssl_cert_SubAltName": "sites.target.com;affiliate.target.com;android.studioconnect.live;api.studioconnect.live;apollo-metrics.target.com;assethub.partnersonline.com;assethub.target.com;awesomeshop.target.com;bex.partnersonline.com;bex.target.com;cartster.target.com;cartwheel.target.com;cartwheelws-secure.target.com;circle.target.com;connect.roundel.com;connectedcommerce.target.com;corporate.target.com;developer.target.com;dojo.target.com;doppler.partnersonline.com;elevate.target.com;extgargantua.partnersonline.com;factorial.partnersonline.com;finds.target.com;gql.studioconnect.live;greenfield.partnersonline.com;greenfield.target.com;hrocdocrequest.target.com;iccon.target.com;incubator.target.com;india.target.com;ios.studioconnect.live;jira.target.com;launchpad.partnersonline.com;launchpad.target.com;leads.studioconnect.live;m.target.com;marketinghub.target.com;mercury.partnersonline.com;mickra.target.com;mickradashboard.target.com;mvs.partnersonline.com;mytime.target.com;nic.target;openhouse.target.com;opensource.target.com;osmosis.partnersonline.com;partnersonline.com;pcn.partnersonline.com;peg.partnersonline.com;photosubmission.target.com;pid.partnersonline.com;plus.target.com;pmworkorderadmin.partnersonline.com;poladmin.partnersonline.com;pop.partnersonline.com;qmp.partnersonline.com;qr.target.com;r2d2.target.com;rdmplus.target.com;recognize.target.com;redcard.target.com;redirect.studioconnect.live;rik.roundel.com;roundel.com;rubix.partnersonline.com;rubix.target.com;security.target.com;servicetech.target.com;sm.partnersonline.com;spark.partnersonline.com;spark.target.com;studioconnect.live;stylehub.target.com;synergy.partnersonline.com;target.com;targetmedianetwork.target.com;targetopenhouse.com;tepagent.target.com;tgt-files.target.com;tgtdriver.partnersonline.com;ti-event-prod.target.com;tiam.target.com;tiiam.target.com;tvi.partnersonline.com;viewpoint.target.com;weeklyad.target.com;www.partnersonline.com;www.roundel.com;www.target.com;www.targetopenhouse.com", + "ssl_cert_SerialNum": "0x012ede33fc9283773396e9b1ff995262", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "210928164609Z", + "ssl_cert_To": "221030164608Z", + "ssl_cert_SSLFPAg": "1.2.840.113549.1.1.11", + "name": "SSL_RESULT_208" + }, { + "Tuple4": "192.168.50.52.17433>3.217.136.163.443", + "ssl_sni": "idx.liadm.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja3s_hash": "303951d4c50efb2e991652225a6f02b1", + "name": "SSL_RESULT_209" + }, { + "Tuple4": "192.168.50.52.17437>3.217.136.163.443", + "ssl_sni": "idx.liadm.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "cd08e31494f9531f560d64c695473da9", + "ssl_ja3s_hash": "303951d4c50efb2e991652225a6f02b1", + "name": "SSL_RESULT_210" + }, { + "Tuple4": "192.168.50.52.17544>142.250.207.74.443", + "ssl_sni": "content-autofill.googleapis.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "598872011444709307b861ae817a4b60", + "ssl_ja3s_hash": "2b0648ab686ee45e0e7c35fcfb0eea7e", + "name": "SSL_RESULT_211" + }, { + "Tuple4": "192.168.50.57.54160>39.105.29.36.443", + "name": "SSL_RESULT_212" + }, { + "Tuple4": "192.168.50.57.54162>39.105.29.36.443", + "name": "SSL_RESULT_213" +}] diff --git a/test/ssl_result.json b/test/ssl_result.json new file mode 100644 index 0000000..85f55d0 --- /dev/null +++ b/test/ssl_result.json @@ -0,0 +1,32 @@ +[{ + "Tuple4": "192.168.50.38.52391>104.16.123.96.443", + "ssl_sni": "ESNI", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "62a4a00de930bd0a5bee0309cc8362ed", + "ssl_ja3s_hash": "eb1d94daa7e0344597e756a1fb6e7054", + "name": "SSL_RESULT_1" +}, { + "Tuple4": "90.143.182.94.55835>93.186.227.131.443", + "ssl_sni": "sun9-20.userapi.com", + "ssl_client_version": "TLS1.2", + "ssl_ja3_hash": "6f5e62edfa5933b1332ddf8b9fb3ef9d", + "ssl_ja3s_hash": "2d1eb5817ece335c24904f516ad5da12", + "ssl_cert_version": "v3", + "ssl_cert_Issuer": "GlobalSign Organization Validation CA - SHA256 - G2;GlobalSign nv-sa;;;;;BE", + "ssl_cert_IssuerCN": "GlobalSign Organization Validation CA - SHA256 - G2", + "ssl_cert_IssuerO": "GlobalSign nv-sa", + "ssl_cert_IssuerC": "BE", + "ssl_cert_Sub": "*.userapi.com;V Kontakte LLC;;Saint-Petersburg;;Saint-Petersburg;RU", + "ssl_cert_SubCN": "*.userapi.com", + "ssl_cert_SubO": "V Kontakte LLC", + "ssl_cert_SubC": "RU", + "ssl_cert_SubP": "Saint-Petersburg", + "ssl_cert_SubL": "Saint-Petersburg", + "ssl_cert_SubCN": "*.userapi.com", + "ssl_cert_SubAltName": "*.userapi.com;vk.me;*.vk-cdn.net;*.vkuserlive.com;*.vkuserlive.net;*.vkuseraudio.net;*.vkuseraudio.com;*.vkuservideo.net;*.vkuservideo.com;*.vk.me;userapi.com", + "ssl_cert_SerialNum": "0x5afa3a189e6a5c11e1e18b0f", + "ssl_cert_AgID": "1.2.840.113549.1.1.11", + "ssl_cert_From": "180717083809Z", + "ssl_cert_To": "190714162604Z", + "name": "SSL_RESULT_2" +}] diff --git a/test/ssl_test_plug.cpp b/test/ssl_test_plug.cpp index 9f956e6..c43ea72 100644 --- a/test/ssl_test_plug.cpp +++ b/test/ssl_test_plug.cpp @@ -27,14 +27,14 @@ extern "C" int commit_test_result_json(cJSON *node, const char *name); static int g_result_count = 1; -static char *ssl_test_assemble_san(st_cert_t *cert) +static char *ssl_test_assemble_san(struct ssl_certificate *certificate) { char *san_buf=NULL; int total_buflen = 0; - for (int i = 0; i < cert->SSLSubAltName->count; i++) + for (int i = 0; i < certificate->subject_alter.num; i++) { - int tmp_buflen = strlen(cert->SSLSubAltName->san_array[i].san); - char *tmp_buf = (char *)realloc(san_buf, total_buflen+tmp_buflen+1); + int tmp_buflen=strlen(certificate->subject_alter.name[i]); + char *tmp_buf=(char *)realloc(san_buf, total_buflen+tmp_buflen+1); if(tmp_buf==NULL) { free(san_buf); @@ -44,7 +44,7 @@ static char *ssl_test_assemble_san(st_cert_t *cert) san_buf=tmp_buf; san_buf[total_buflen + tmp_buflen] = ';'; - memcpy(san_buf+total_buflen, cert->SSLSubAltName->san_array[i].san, tmp_buflen); + memcpy(san_buf+total_buflen, certificate->subject_alter.name[i], tmp_buflen); total_buflen+=tmp_buflen+1; } @@ -60,10 +60,9 @@ extern "C" unsigned char SSL_TEST_PLUG_ENTRY(stSessionInfo *session_info, void * assert(NULL != session_info || pme != NULL); cJSON *ctx = (cJSON *)*pme; - st_cert_t *cert=NULL; - ssl_stream *a_ssl = (ssl_stream *)(session_info->app_info); - _ssl_ja3_info_t *ja3_info = NULL; - _ssl_ja3s_info_t *ja3s_info = NULL; + + struct ssl_stream *a_ssl = (struct ssl_stream *)(session_info->app_info); + struct ssl_ja3_info *ja3_info = NULL; if (session_info->session_state & SESSION_STATE_PENDING) { @@ -78,28 +77,28 @@ extern "C" unsigned char SSL_TEST_PLUG_ENTRY(stSessionInfo *session_info, void * switch (session_info->prot_flag) { case SSL_CLIENT_HELLO: - if (a_ssl== NULL || a_ssl->stClientHello==NULL) + if (a_ssl== NULL || a_ssl->chello==NULL) { break; } - if (strlen((char *)(a_ssl->stClientHello->server_name)) > 0) + if (strlen((char *)(a_ssl->chello->server_name)) > 0) { - cJSON_AddStringToObject(ctx, (const char *)"ssl_sni", (const char *)(a_ssl->stClientHello->server_name)); + cJSON_AddStringToObject(ctx, (const char *)"ssl_sni", (const char *)(a_ssl->chello->server_name)); } - if (a_ssl->stClientHello->encrypt_chello != NULL) + if (a_ssl->chello->encrypt_chello != NULL) { cJSON_AddStringToObject(ctx, (const char *)"ssl_ech", "1"); } - if (a_ssl->stClientHello->encrypted_server_name.esni != NULL) + if (a_ssl->chello->esni.is_esni==1) { cJSON_AddStringToObject(ctx, (const char *)"ssl_sni", "ESNI"); } - if (ssl_get_version_name(a_ssl->stClientHello->client_ver)) + if (ssl_get_version_name(a_ssl->chello->version) != NULL) { - cJSON_AddStringToObject(ctx, "ssl_client_version", ssl_get_version_name(a_ssl->stClientHello->client_ver)); + cJSON_AddStringToObject(ctx, "ssl_client_version", ssl_get_version_name(a_ssl->chello->version)); } ja3_info = ssl_get_ja3_fingerprint(a_tcp, (unsigned char *)a_tcp->ptcpdetail->pdata, (unsigned int)a_tcp->ptcpdetail->datalen, a_tcp->threadnum); @@ -110,129 +109,122 @@ extern "C" unsigned char SSL_TEST_PLUG_ENTRY(stSessionInfo *session_info, void * break; case SSL_SERVER_HELLO: - ja3s_info = ssl_get_ja3s_fingerprint(a_tcp, (unsigned char *)a_tcp->ptcpdetail->pdata, (unsigned int)a_tcp->ptcpdetail->datalen, a_tcp->threadnum); - if (ja3s_info != NULL && ja3s_info->fp != NULL && ja3s_info->fp_len > 0) + if (a_ssl->shello->ja3s.fingerprint_md5 != NULL && a_ssl->shello->ja3s.fingerprint_md5_len > 0) { - cJSON_AddStringToObject(ctx, "ssl_ja3s_hash", ja3s_info->fp); + cJSON_AddStringToObject(ctx, "ssl_ja3s_hash", a_ssl->shello->ja3s.fingerprint_md5); } break; case SSL_CERTIFICATE_DETAIL: - if (a_ssl==NULL || a_ssl->stSSLCert==NULL || a_tcp->curdir==DIR_C2S) + if (a_ssl==NULL || a_ssl->certificate==NULL || a_tcp->curdir==DIR_C2S) { break; } - cert = a_ssl->stSSLCert; - if (cert->cert_type != CERT_TYPE_INDIVIDUAL) + if (a_ssl->certificate->cert_type != CERT_TYPE_INDIVIDUAL) { break; } - if (strlen(cert->SSLVersion) > 0) + if(a_ssl->certificate->version.len > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_version", cert->SSLVersion); + cJSON_AddStringToObject(ctx, "ssl_cert_version", (const char*)a_ssl->certificate->version.value); } - if(strlen(cert->SSLIssuer)>0) + if(strlen(a_ssl->certificate->issuer.rdn_sequence_list)>0) { - cJSON_AddStringToObject(ctx, "ssl_cert_Issuer", cert->SSLIssuer); + cJSON_AddStringToObject(ctx, "ssl_cert_Issuer", a_ssl->certificate->issuer.rdn_sequence_list); - if (cert->SSLIssuerCN != NULL && strlen(cert->SSLIssuerCN) > 0) + if(strlen(a_ssl->certificate->issuer.common) > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_IssuerCN", cert->SSLIssuerCN); + cJSON_AddStringToObject(ctx, "ssl_cert_IssuerCN", a_ssl->certificate->issuer.common); } - if (cert->SSLIssuerO != NULL && strlen(cert->SSLIssuerO) > 0) + if(strlen(a_ssl->certificate->issuer.organization) > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_IssuerO", cert->SSLIssuerO); + cJSON_AddStringToObject(ctx, "ssl_cert_IssuerO", a_ssl->certificate->issuer.organization); } - if (cert->SSLIssuerC != NULL && strlen(cert->SSLIssuerC) > 0) + if(strlen(a_ssl->certificate->issuer.country) > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_IssuerC", cert->SSLIssuerC); + cJSON_AddStringToObject(ctx, "ssl_cert_IssuerC", a_ssl->certificate->issuer.country); } - if (cert->SSLIssuerP != NULL && strlen(cert->SSLIssuerP) > 0) + if(strlen(a_ssl->certificate->issuer.state_or_Province) > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_IssuerP", cert->SSLIssuerP); + cJSON_AddStringToObject(ctx, "ssl_cert_IssuerP", a_ssl->certificate->issuer.state_or_Province); } - if (cert->SSLIssuerL != NULL && strlen(cert->SSLIssuerL) > 0) + if(strlen(a_ssl->certificate->issuer.locality) > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_IssuerL", cert->SSLIssuerL); + cJSON_AddStringToObject(ctx, "ssl_cert_IssuerL", a_ssl->certificate->issuer.locality); } - if (cert->SSLIssuerS != NULL && strlen(cert->SSLIssuerS) > 0) + if(strlen(a_ssl->certificate->issuer.street_address) > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_IssuerS", cert->SSLIssuerS); + cJSON_AddStringToObject(ctx, "ssl_cert_IssuerS", a_ssl->certificate->issuer.street_address); } - if (cert->SSLIssuerU != NULL && strlen(cert->SSLIssuerU) > 0) + if(strlen(a_ssl->certificate->issuer.organizational_unit) > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_IssuerU", cert->SSLIssuerU); + cJSON_AddStringToObject(ctx, "ssl_cert_IssuerU", a_ssl->certificate->issuer.organizational_unit); } } - if(strlen(cert->SSLSub)>0) + if(strlen(a_ssl->certificate->subject.rdn_sequence_list)>0) { - cJSON_AddStringToObject(ctx, "ssl_cert_Sub", cert->SSLSub); + cJSON_AddStringToObject(ctx, "ssl_cert_Sub", a_ssl->certificate->subject.rdn_sequence_list); - if (cert->SSLSubCN != NULL && strlen(cert->SSLSubCN) > 0) + if(strlen(a_ssl->certificate->subject.common) > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_SubCN", cert->SSLSubCN); + cJSON_AddStringToObject(ctx, "ssl_cert_SubCN", a_ssl->certificate->subject.common); } - if (cert->SSLSubO != NULL && strlen(cert->SSLSubO) > 0) + if(strlen(a_ssl->certificate->subject.organization) > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_SubO", cert->SSLSubO); + cJSON_AddStringToObject(ctx, "ssl_cert_SubO", a_ssl->certificate->subject.organization); } - if (cert->SSLSubC != NULL && strlen(cert->SSLSubC) > 0) + if(strlen(a_ssl->certificate->subject.country) > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_SubC", cert->SSLSubC); + cJSON_AddStringToObject(ctx, "ssl_cert_SubC", a_ssl->certificate->subject.country); } - if (cert->SSLSubP != NULL && strlen(cert->SSLSubP) > 0) + if(strlen(a_ssl->certificate->subject.state_or_Province) > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_SubP", cert->SSLSubP); + cJSON_AddStringToObject(ctx, "ssl_cert_SubP", a_ssl->certificate->subject.state_or_Province); } - if (cert->SSLSubL != NULL && strlen(cert->SSLSubL) > 0) + if(strlen(a_ssl->certificate->subject.locality) > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_SubL", cert->SSLSubL); + cJSON_AddStringToObject(ctx, "ssl_cert_SubL", a_ssl->certificate->subject.locality); } - if (cert->SSLSubS != NULL && strlen(cert->SSLSubS) > 0) + if(strlen(a_ssl->certificate->subject.street_address) > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_SubS", cert->SSLSubS); + cJSON_AddStringToObject(ctx, "ssl_cert_SubS", a_ssl->certificate->subject.street_address); } - if (cert->SSLSubU != NULL && strlen(cert->SSLSubU) > 0) + if(strlen(a_ssl->certificate->subject.organizational_unit) > 0) { - cJSON_AddStringToObject(ctx, "ssl_cert_SubU", cert->SSLSubU); + cJSON_AddStringToObject(ctx, "ssl_cert_SubU", a_ssl->certificate->subject.organizational_unit); } } - if (cert->SSLSubCN!=NULL) - { - cJSON_AddStringToObject(ctx, "ssl_cert_SubCN", cert->SSLSubCN); - } - - if (cert->SSLSubAltName != NULL && cert->SSLSubAltName->count > 0) + if(a_ssl->certificate->subject_alter.name != NULL && a_ssl->certificate->subject_alter.num>0) { - char *san_buf = ssl_test_assemble_san(cert); + char *san_buf = ssl_test_assemble_san(a_ssl->certificate); cJSON_AddStringToObject(ctx, "ssl_cert_SubAltName", san_buf); free(san_buf); san_buf=NULL; } - if(cert->SSLSerialNumLen>0) + if(a_ssl->certificate->serial.len>0) { - char *serialBuf=(char *)calloc(1, cert->SSLSerialNumLen*2+1+2); + char *serialBuf=(char *)calloc(1, a_ssl->certificate->serial.len*2+1+2); int offset=snprintf(serialBuf, 3, "0x"); - for(int i=0; iSSLSerialNumLen; i++) + for(int i=0; icertificate->serial.len; i++) { - offset+=snprintf(serialBuf+offset, cert->SSLSerialNumLen*2+1+2-offset, "%02hhx", (unsigned char )(cert->SSLSerialNum[i])); + offset+=snprintf(serialBuf+offset, a_ssl->certificate->serial.len*2+1+2-offset, "%02hhx", (unsigned char )(a_ssl->certificate->serial.value[i])); } cJSON_AddStringToObject(ctx, "ssl_cert_SerialNum", serialBuf); @@ -240,46 +232,44 @@ extern "C" unsigned char SSL_TEST_PLUG_ENTRY(stSessionInfo *session_info, void * serialBuf=NULL; } - if(strlen(cert->SSLAgID)>0) + if(a_ssl->certificate->signature_algorithm.len>0) { - cJSON_AddStringToObject(ctx, "ssl_cert_AgID", cert->SSLAgID); + cJSON_AddStringToObject(ctx, "ssl_cert_AgID", (const char*)a_ssl->certificate->signature_algorithm.value); } - if(strlen(cert->SSLFPAg)>0) + if(strlen(a_ssl->certificate->validity.before)>0) { - cJSON_AddStringToObject(ctx, "ssl_cert_FPAg", cert->SSLFPAg); + cJSON_AddStringToObject(ctx, "ssl_cert_From", a_ssl->certificate->validity.before); } - if(strlen(cert->SSLFrom)>0) + if(strlen(a_ssl->certificate->validity.after)>0) { - cJSON_AddStringToObject(ctx, "ssl_cert_From", cert->SSLFrom); + cJSON_AddStringToObject(ctx, "ssl_cert_To", a_ssl->certificate->validity.after); } - if(strlen(cert->SSLTo)>0) + if(a_ssl->certificate->algorithm_identifier.len>0) { - cJSON_AddStringToObject(ctx, "ssl_cert_To", cert->SSLTo); + cJSON_AddStringToObject(ctx, "ssl_cert_SSLFPAg", (const char*)a_ssl->certificate->algorithm_identifier.value); } - break; - default: - break; - } - - if(session_info->session_state&SESSION_STATE_CLOSE) - { - if(ctx) - { - char result_name[16]=""; - sprintf(result_name,"SSL_RESULT_%d", g_result_count); - commit_test_result_json(ctx, result_name); - g_result_count+=1; - } - *pme = NULL; - return PROT_STATE_DROPME; - - } + break; + default: + break; + } - return PROT_STATE_GIVEME; + if(session_info->session_state&SESSION_STATE_CLOSE) + { + if(ctx) + { + char result_name[16]=""; + sprintf(result_name,"SSL_RESULT_%d", g_result_count); + commit_test_result_json(ctx, result_name); + g_result_count+=1; + } + *pme = NULL; + return PROT_STATE_DROPME; + } + return PROT_STATE_GIVEME; } extern "C" int SSL_TEST_PLUG_INIT() -- cgit v1.2.3