ja4 - fix http method for ja4h

astibal · Nov 11, 2024 · 18fc16b · 18fc16b
1 parent c727f18
commit 18fc16b
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/inspect/engine/http.cpp b/src/inspect/engine/http.cpp
@@ -539,8 +539,13 @@ namespace sx::engine::http {
                     }
                 }
             }
-            if(ja4h.has_value())
+            if(ja4h.has_value()) {
+                auto meth = my_app_data->http_data.method;
+                if(meth.size() >= 2)
+                    ja4h->cmd = sx::ja4::util::to_lower(meth).substr(0,2);
+
                 my_app_data->http_data.ja4h = ja4h->ja4h();
+            }
 
             detect_app(ctx, side, my_app_data, stream_id, flags, data);
             if(ctx.origin->opt_kb_enabled) {