Struct ja3_new::Ja3

pub struct Ja3 { /* private fields */ }

A JA3 hash builder. This provides options about how to extract a JA3 hash from a TLS handshake.

Implementations

impl Ja3

pub fn new<S: AsRef<OsStr>>(pcap_path: S) -> Self

Creates a new Ja3 object.

It will extract JA3 hashes from the packet capture located at pcap_path or the network interface named pcap_path, depending on whether the consumer calls process_pcap or process_live.

pub fn any_port<'a>(&'a mut self) -> &'a mut Self

Change the hasher behavior to scan for TLS handshakes occuring on any TCP port. By default we only fingerprint handshakes on TCP 443.

pub fn process_pcap(&self) -> Result<Vec<Ja3Hash>, Error>

Scans the provided packet capture for TLS handshakes and returns JA3 hashes for any found.

Trait Implementations

impl Debug for Ja3

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.