Suricata TLS

{% if suricata.tls %} {% for tls in suricata.tls %} {% endfor %}
Timestamp Source IP Source Port Destination IP Destination Port Subject Issuer Fingerprint JA3 Version
{{tls.timestamp}} {{tls.srcip}} [VT] {% if config.display_et_portal %} [ET] {% endif %} {% if config.display_pt_portal %} [PT] {% endif %} {% if tls.moloch_src_ip_url %} [MLCH] {% endif %} {{tls.srcport}} {% if tls.moloch_src_port_url %} [MLCH] {% endif %} {{tls.dstip}} [VT] {% if config.display_et_portal %} [ET] {% endif %} {% if config.display_pt_portal %} [PT] {% endif %} {% if tls.moloch_dst_ip_url %} [MLCH] {% endif %} {{tls.dstport}} {% if tls.moloch_dst_port_url %} [MLCH] {% endif %} {{tls.subject}} {{tls.issuerdn}} {{tls.fingerprint}} {% if tls.ja3 %}
  • hash: {{tls.ja3.hash}}
  • string: {{tls.ja3.string}}
{% endif %} 		{{tls.version}}
{% else %}

No Suricata TLS

{% endif %}