{"action":"opened","issue":{"url":"https://api.github.com/repos/salesforce/ja3/issues/31","repository_url":"https://api.github.com/repos/salesforce/ja3","labels_url":"https://api.github.com/repos/salesforce/ja3/issues/31/labels{/name}","comments_url":"https://api.github.com/repos/salesforce/ja3/issues/31/comments","events_url":"https://api.github.com/repos/salesforce/ja3/issues/31/events","html_url":"https://github.com/salesforce/ja3/issues/31","id":394009769,"node_id":"MDU6SXNzdWUzOTQwMDk3Njk=","number":31,"title":"Integration in IVRE","user":{"login":"p-l-","id":5064814,"node_id":"MDQ6VXNlcjUwNjQ4MTQ=","avatar_url":"https://avatars3.githubusercontent.com/u/5064814?v=4","gravatar_id":"","url":"https://api.github.com/users/p-l-","html_url":"https://github.com/p-l-","followers_url":"https://api.github.com/users/p-l-/followers","following_url":"https://api.github.com/users/p-l-/following{/other_user}","gists_url":"https://api.github.com/users/p-l-/gists{/gist_id}","starred_url":"https://api.github.com/users/p-l-/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/p-l-/subscriptions","organizations_url":"https://api.github.com/users/p-l-/orgs","repos_url":"https://api.github.com/users/p-l-/repos","events_url":"https://api.github.com/users/p-l-/events{/privacy}","received_events_url":"https://api.github.com/users/p-l-/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-12-25T11:30:45Z","updated_at":"2018-12-25T11:30:45Z","closed_at":null,"author_association":"NONE","body":"Hi there,\r\n\r\nThanks a lot for sharing JA3, it is a great idea!\r\n\r\nFor your information, I have integrated JA3 support, based on the Bro scripts from this repository, to the `passiverecon` Bro script integrated to (and used by) [IVRE](https://ivre.rocks/), an open-source passive & active network recon framework.\r\n\r\nI have tried to prevent any incompatibility with your scripts (or other existing scripts) by using `ivre` specific prefix for the records added to existing logs and structures (to prevent issues similar to #13).\r\n\r\nI have also simplified & improved the code, so you may want to reuse some of the changes I made.\r\n\r\nThe integration has been done in cea-sec/ivre#624. The script, based on your code, is released under the same license as IVRE (GPLv3+), while keeping the Salesforce copyright notice (`Copyright 2017 salesforce.com, inc.`) as it is my understanding that this is permitted by the license used for the original scripts. Please let me know if you disagree or if it is a problem for you.\r\n\r\nThanks again!"}}
{"actor":{"display_login":"p-l-"}}