Skip to content

Commit

Permalink
Create README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
john-althouse authored Nov 19, 2023
1 parent 6256dcc commit b398efd
Showing 1 changed file with 28 additions and 0 deletions.
28 changes: 28 additions & 0 deletions wireshark/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
# JA4+ Plugin for Wireshark

![JA4](https://github.com/FoxIO-LLC/ja4/blob/main/wireshark/screenshot.png)

This has been tested on Wireshark ver. 4.2.0

## Install
1. Copy ```ja4.dll``` to your global plugins directory under epan.
Windows: ```C:\Program Files\Wireshark\plugins\4.2\epan\```
Mac: ```/Applications/Wireshark.app/Contents/PlugIns/wireshark/4-2/epan/```
2. Start Wireshark

## Config
JA4+ fields are under ja4.*
JA4: ```ja4.ja4```
JA4S: ```ja4.ja4s```
JA4H: ```ja4.ja4h```
JA4L-C: ```ja4.ja4lc```
JA4L-S: ```ja4.ja4ls```
JA4X: ```ja4.ja4x```
JA4SSH: ```ja4.ja4ssh```

Add JA4+ to your columns for easy identification and sorting. Go to ```Preferences...``` and add as follows:

![Config](https://github.com/FoxIO-LLC/ja4/blob/main/wireshark/column-config.png)

## Licensing
See [Licensing](https://github.com/FoxIO-LLC/ja4/tree/main#licensing) under repo root.

0 comments on commit b398efd

Please sign in to comment.