Skip to content

Fix: Update ja4t logic to output padded zeroes for missing options#296

Merged
john-althouse merged 1 commit into
FoxIO-LLC:mainfrom
J0eJ0h:fix-zeek-ja4t
May 20, 2026
Merged

Fix: Update ja4t logic to output padded zeroes for missing options#296
john-althouse merged 1 commit into
FoxIO-LLC:mainfrom
J0eJ0h:fix-zeek-ja4t

Conversation

@J0eJ0h

@J0eJ0h J0eJ0h commented May 20, 2026

Copy link
Copy Markdown
Collaborator
  • fix: update ja4t logic to output padded zeroes for missing options

Updates ja4t and ja4ts format logic in Zeek to match the spec:

  • Missing TCP options output as 00 instead of empty.
  • Missing or zero-value MSS output as 00 instead of 0.
  • Missing or zero-value Window Scale output as 00 instead of 0.

Updates corresponding btest baselines.

chore: remove .btest.failed.dat and add to .gitignore

* fix: update ja4t logic to output padded zeroes for missing options

Updates `ja4t` and `ja4ts` format logic in Zeek to match the spec:
- Missing TCP options output as `00` instead of empty.
- Missing or zero-value MSS output as `00` instead of `0`.
- Missing or zero-value Window Scale output as `00` instead of `0`.

Updates corresponding btest baselines.

chore: remove .btest.failed.dat and add to .gitignore
@john-althouse john-althouse merged commit f7bf03a into FoxIO-LLC:main May 20, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants