Skip to content

Commit 6866455

Browse files
committed
Unirec output: removed duplicit TLS JA3 element IPFIX
ipfixprobe uses flowmon PEN for TLS JA3, which has the same format and semantic.
1 parent ef837bf commit 6866455

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

extra_plugins/output/unirec/config/unirec-elements.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -179,7 +179,7 @@ FME_TLS_PUBLIC_KEYALG uint16 flowmon:tlsPublicKeyAlg
179179
FME_TLS_PUBLIC_KEYLENGTH int32 flowmon:tlsPublicKeyLength # tlsPublicKeyLength
180180

181181
TLS_SNI string cesnet:TLSSNI # Server Name Indication https://en.wikipedia.org/wiki/Server_Name_Indication
182-
TLS_JA3_FINGERPRINT bytes cesnet:tlsJa3Fingerprint,flowmon:tlsJa3Fingerprint # tlsJa3Fingerprint
182+
TLS_JA3_FINGERPRINT bytes flowmon:tlsJa3Fingerprint # tlsJa3Fingerprint
183183

184184
QUIC_SNI string cesnet:quicSNI # Server Name Indication from QUIC
185185

0 commit comments

Comments
 (0)