File: quic.rst

package info (click to toggle)
suricata 1%3A8.0.1-3
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 240,704 kB
  • sloc: ansic: 357,736; python: 8,721; sh: 5,043; makefile: 2,411; perl: 570; php: 170
file content (72 lines) | stat: -rw-r--r-- 2,858 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
Top Level (object)
^^^^^^^^^^^^^^^^^^
.. table::
   :width: 100%
   :widths: 30 25 45

   ========== ================ ================================================================
   Name       Type             Description                                                     
   ========== ================ ================================================================
   cyu        array of objects JA3-like fingerprint for versions of QUIC before standardization
   extensions array of objects list of extensions in hello                                     
   ja3        object           JA3 from client, as in TLS                                      
   ja3s       object           JA3 from server, as in TLS                                      
   ja4        string                                                                           
   sni        string           Server Name Indication                                          
   ua         string           User Agent for versions of QUIC before standardization          
   version    string           Quic protocol version                                           
   ========== ================ ================================================================

ja3s (object)
^^^^^^^^^^^^^
.. table::
   :width: 100%
   :widths: 30 25 45

   ====== ====== ==========================
   Name   Type   Description               
   ====== ====== ==========================
   hash   string JA3s hex representation   
   string string JA3s string representation
   ====== ====== ==========================

ja3 (object)
^^^^^^^^^^^^
.. table::
   :width: 100%
   :widths: 30 25 45

   ====== ====== =========================
   Name   Type   Description              
   ====== ====== =========================
   hash   string JA3 hex representation   
   string string JA3 string representation
   ====== ====== =========================

extensions (array of objects)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
.. table::
   :width: 100%
   :widths: 30 25 45

   ====== ================ ====================================
   Name   Type             Description                         
   ====== ================ ====================================
   name   string           Human-friendly name of the extension
   type   integer          Integer identifier of the extension 
   values array of strings Extension values                    
   ====== ================ ====================================

cyu (array of objects)
^^^^^^^^^^^^^^^^^^^^^^
.. table::
   :width: 100%
   :widths: 30 25 45

   ====== ====== ==============================
   Name   Type   Description                   
   ====== ====== ==============================
   hash   string CYU hash hex representation   
   string string CYU hash string representation
   ====== ====== ==============================