Releases: FoxIO-LLC/ja4
Releases · FoxIO-LLC/ja4
ja4-wireshark-plugins-2025.05.27.13
Remove unused functions (#231)
ja4-wireshark-plugins-2025.05.27.12
Remove unused functions (#231)
ja4-wireshark-plugins-2025.05.26.58: Wireshark: avoid wmem_packet_scope() (#229)
Remove all references to `wmem_packet_scope()`. This protects the plugin against [planned improvements][1] to Wireshark memory management. In `dissect_ja4()` and `init_ja4_data()`, directly replace `wmem_packet_scope()` with `pinfo->pool`. The two are effectively the same. For `decode_http_lang()` and `wmem_list_to_str()`, add an argument to the function signature which is a `wmem_allocator_t *`. Call `decode_http_lang()` with `pinfo->pool` as the value for this argument. `wmem_list_to_str()` only seems to be called by `ja4()` and `ja4_r()`, and neither of those currently appear to be called by anything. For now, I've made them pass `wmem_file_scope()` for the new argument of `wmem_list_to_str()` since that's the scope they use for most of their other work. [1]: https://lists.wireshark.org/archives/wireshark-dev/202107/msg00052.html
ja4-wireshark-plugins-2025.05.26.04: Wireshark: avoid wmem_packet_scope() (#229)
Remove all references to `wmem_packet_scope()`. This protects the plugin against [planned improvements][1] to Wireshark memory management. In `dissect_ja4()` and `init_ja4_data()`, directly replace `wmem_packet_scope()` with `pinfo->pool`. The two are effectively the same. For `decode_http_lang()` and `wmem_list_to_str()`, add an argument to the function signature which is a `wmem_allocator_t *`. Call `decode_http_lang()` with `pinfo->pool` as the value for this argument. `wmem_list_to_str()` only seems to be called by `ja4()` and `ja4_r()`, and neither of those currently appear to be called by anything. For now, I've made them pass `wmem_file_scope()` for the new argument of `wmem_list_to_str()` since that's the scope they use for most of their other work. [1]: https://lists.wireshark.org/archives/wireshark-dev/202107/msg00052.html
ja4-wireshark-plugins-2025.05.22.22
Remove application handshake latency in JA4L for HTTP (#228)
ja4-wireshark-plugins-2025.05.21.22: Remove tap listener and clean up unused code (#226)
* Remove tap listener from Wireshark plugin * Remove commented out code * Remove unused frame number variable * Remove unused function * Fix JA4SSH mode calculation
ja4-wireshark-plugins-2025.05.16.49: Add test framework for validating the Wireshark plugin output (#222)
* Generate tshark JSON output files for test pcaps * Add tshark output tests * Allow input files as arguments * Update the documentation
ja4-wireshark-plugins-2025.05.09.25
Update README.md
ja4-wireshark-plugins-2025.04.29.47
Fix HTTP2 header capture (#220)
ja4-wireshark-plugins-2025.04.28.43: Add HTTP2 support for JA4H in Wireshark plugin (#219)
* Add HTTP2 support for JA4H in Wireshark plugin * Apply automatic formatting