mirror of
https://github.com/activecm/rita
synced 2026-06-08 13:02:45 +00:00
Naomi Kramer
20 lines
5.9 KiB
Plaintext
20 lines
5.9 KiB
Plaintext
#separator \x09
|
|
#set_separator ,
|
|
#empty_field (empty)
|
|
#unset_field -
|
|
#path ssl
|
|
#open 2019-02-28-12-07-01
|
|
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p version cipher curve server_name resumed last_alert next_protocol established cert_chain_fuids client_cert_chain_fuids subject issuer client_subject client_issuer validation_status ja3 ja3s
|
|
#types time string addr port addr port string string string string bool string string bool vector[string] vector[string] string string string string string string string
|
|
1517422336.045390 C2nyFQkh6oijTV5hd 10.55.100.111 57488 208.89.12.153 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 lptag.liveperson.net F - h2 T Fboy4loJvroOw6ol,F2dOiA4unEM6nUIaL4,F2wxVc3kxAHfhJoZD4 (empty) CN=*.liveperson.net,OU=Enterprise SSL Pro Wildcard,OU=Hosted by LivePerson\\, Inc.,OU=LivePerson\\, Inc.,O=LivePerson\\, Inc,street=New York,L=New York,ST=New York,postalCode=10007,C=US CN=COMODO RSA Organization Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB csubject cissuer ok 10ee8d30a5d01c042afd7b2b205facc4 b898351eb5e266aefd3723d466935494
|
|
1517422336.047569 CVK45n2YhAfzjO1osb 10.55.100.111 57489 208.89.12.153 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 lptag.liveperson.net F - h2 T FwNiei8CnkiOxrGQ7,FqstZD1byPg5uuGVBc,F0o7WM29n2Bp0ZJlOd (empty) CN=*.liveperson.net,OU=Enterprise SSL Pro Wildcard,OU=Hosted by LivePerson\\, Inc.,OU=LivePerson\\, Inc.,O=LivePerson\\, Inc,street=New York,L=New York,ST=New York,postalCode=10007,C=US CN=COMODO RSA Organization Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB - - ok 10ee8d30a5d01c042afd7b2b205facc4 b898351eb5e266aefd3723d466935494
|
|
1517422336.908272 CbrqwH1I60ijqdvo5k 10.55.100.111 57491 208.89.12.91 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 accdn.lpsnmedia.net F - - T F6ocsr1uKSaAJvRQj6,FQEFEd206A6IEYrgja,FdtYd61aSCbKiTOXx9 (empty) CN=*.lpsnmedia.net,OU=PlatinumSSL Wildcard,OU=Hosted by LivePerson\\, Inc.,OU=LivePerson\\, Inc.,O=LivePerson\\, Inc,street=New York,L=New York,ST=New York,postalCode=100007,C=US CN=COMODO RSA Organization Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB - - ok 10ee8d30a5d01c042afd7b2b205facc4 389ed42c02ebecc32e73aa31def07e14
|
|
1517422336.915725 CCsyTNC6hgh4yvKNh 10.55.100.111 57492 208.89.12.91 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 accdn.lpsnmedia.net F - - T FgSXhz2PR08zwU9zj5,F0xhZZ33xEEWsiZfJ3,Fy4sTv2zYbAhs9u6s (empty) CN=*.lpsnmedia.net,OU=PlatinumSSL Wildcard,OU=Hosted by LivePerson\\, Inc.,OU=LivePerson\\, Inc.,O=LivePerson\\, Inc,street=New York,L=New York,ST=New York,postalCode=100007,C=US CN=COMODO RSA Organization Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB - - ok 10ee8d30a5d01c042afd7b2b205facc4 389ed42c02ebecc32e73aa31def07e14
|
|
1517422336.919708 CUvK4P2FQEe55zklqd 10.55.100.111 57490 208.89.12.91 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 accdn.lpsnmedia.net F - - T Flg3bk2zQhY71W1u5k,FqlZdKkj3PbIrTT8,FSVa17WAeqIXd3a99 (empty) CN=*.lpsnmedia.net,OU=PlatinumSSL Wildcard,OU=Hosted by LivePerson\\, Inc.,OU=LivePerson\\, Inc.,O=LivePerson\\, Inc,street=New York,L=New York,ST=New York,postalCode=100007,C=US CN=COMODO RSA Organization Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB - - ok 10ee8d30a5d01c042afd7b2b205facc4 389ed42c02ebecc32e73aa31def07e14
|
|
1517422337.448380 CUkrdw1LYGK7JzksDi 10.55.100.111 57493 208.89.12.87 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 va.v.liveperson.net F - - T FTQngf2u7zsllGnWVl,FCfvtX1UJW7XGEXfkg,Ffnn4v4C34aduNkr8g (empty) CN=*.v.liveperson.net,OU=PlatinumSSL Wildcard,OU=Hosted by LivePerson\\, Inc.,OU=LivePerson\\, Inc.,O=LivePerson\\, Inc,street=New York,L=New York,ST=New York,postalCode=100007,C=US CN=COMODO RSA Organization Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB - - ok 10ee8d30a5d01c042afd7b2b205facc4 389ed42c02ebecc32e73aa31def07e14
|
|
1517422337.448738 CktFHnR50Sdn2Ssg5 10.55.100.111 57494 208.89.12.87 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 va.v.liveperson.net F - - T FSxHra1EFsAF2AfQJe,Fl9arX1XZ5faPDh514,FuCyps2A1zM0jIHwx7 (empty) CN=*.v.liveperson.net,OU=PlatinumSSL Wildcard,OU=Hosted by LivePerson\\, Inc.,OU=LivePerson\\, Inc.,O=LivePerson\\, Inc,street=New York,L=New York,ST=New York,postalCode=100007,C=US CN=COMODO RSA Organization Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB - - ok 10ee8d30a5d01c042afd7b2b205facc4 389ed42c02ebecc32e73aa31def07e14
|
|
1517422355.307559 ChzkTs6bcBCemLvPl 10.55.100.104 55041 13.78.179.199 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 x25519 array808-prod.do.dsp.mp.microsoft.com F - h2 T FX4T0816swc5HHXx1b,FNDSl21ELiyr5nb3f (empty) CN=array801-prod.do.dsp.mp.microsoft.com CN=Microsoft IT TLS CA 4,OU=Microsoft IT,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US - - ok bd0bf25947d4a37404f0424edf4db9ad 8415e777e0df6478fa9e17af0701002f
|
|
1517422395.600808 CgZojz1v4w0aM5GZ6c 10.55.100.110 65157 13.78.187.58 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 x25519 array802-prod.do.dsp.mp.microsoft.com F - h2 T FYusyH3iQzZnFSDMxg,FSyUhkZERx31p9hnj (empty) CN=array801-prod.do.dsp.mp.microsoft.com CN=Microsoft IT TLS CA 4,OU=Microsoft IT,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US - - ok bd0bf25947d4a37404f0424edf4db9ad 8415e777e0df6478fa9e17af0701002f
|
|
1517422417.952047 CQIKKS1s2uSOJIENzl 10.55.100.109 62754 64.4.54.253 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 secp256r1 settings-win.data.microsoft.com F - - T FiZtbG45k67AA254A5,F7LPKs2mQtpnZgt5xf (empty) CN=settings-win.data.microsoft.com,OU=WSE,O=Microsoft,L=Redmond,ST=WA,C=US CN=Microsoft Secure Server CA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US - - unable to get local issuer certificate bd0bf25947d4a37404f0424edf4db9ad d26ba888ffd53c3914cfbd00cf174690
|
|
#close 2019-02-28-12-12-08
|