When i ran the ./fingerprinter.py test.pcap, I am not getting any values. it's returning empty only

Question

When i ran the ./fingerprinter.py test.pcap, I am not getting any values. it's returning empty only

muthhus opened this issue 6 years ago · 2 comments

When i ran the ./fingerprinter.py test.pcap, I am not getting any values. it's returning empty only.

Thanks

Answer 1 · 2019-05-22T08:41:54.000Z

It's only working with your test pcap data. I assume that it might be formatted/implemented based on your test pcap file structure.

Answer 2 · 2019-05-22T11:58:19.000Z

it appears that there may not be a TLS fingerprint in your PCAP file. Try this:

bin/joy fpx=1

and see if the output contains a TLS fingerprint. If not then the PCAP file you have does not contain a TLS PCAP. if you run the same command on test/pcaps/tls12.pcap you will see a fingerprint is found.

if you have gzip option turned on, then pipe the output into zless