Update main.zeek

FoxIO-LLC · Oct 14, 2024 · 52c3734 · 52c3734
1 parent 8ac94bf
commit 52c3734
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/zeek/ja4ssh/main.zeek b/zeek/ja4ssh/main.zeek
@@ -124,7 +124,6 @@ event ConnThreshold::packets_threshold_crossed(c: connection, threshold: count,
           c$fp$ja4ssh$resp_pack_len += rp$tcp$dl;
         }
     }
-    # TODO:  add config for packet count
     if(|c$fp$ja4ssh$orig_pack_len| + |c$fp$ja4ssh$resp_pack_len| >= ja4_ssh_packet_count) {
       do_ja4ssh(c);
     }
@@ -149,4 +148,4 @@ event connection_state_remove(c: connection) {
   if(c?$fp && c$fp?$ja4ssh && c$fp$ja4ssh$is_ssh) {
     do_ja4ssh(c);
   }
-}
+}