JA3/JA4 :: nginx <-> tshark ================================================================================ request : 216.73.216.183:20327 HTTP/1.1 TCP capture : ClientHello captured at 29/09/2026 05:04:51 UTC. 1 request on this connection +-- JA4 [MATCH] ---------------------------------------------------------------- | nginx : t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3 | tshark : t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3 +-------------------------------------------------------------------------------- +-- JA3 HASH ------------------------------------------------------------------- | nginx : 24dd0f987266c37f39231f6f2130d12e | tshark : c2ef4c1cb942cec347d6c74a130a2b59 +-------------------------------------------------------------------------------- +-- JA3 STRING ----------------------------------------------------------------- | nginx : 771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,0-5-10-11-13-16-23-35-43-45-51,29-23-24,0 | tshark : 771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,45-5-11-10-13-23-0-35-43-16-51,29-23-24,0 +-------------------------------------------------------------------------------- [reload / new request] [history] [all JA3/JA4 endpoints]
JA3 FIELD MAP :: 771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,45-5-11-10-13-23-0-35-43-16-51,29-23-24,0
| field | decimal | hex | meaning |
|---|---|---|---|
| version | 771 | 0x0303 | TLS 1.2 legacy_version (also used by TLS 1.3 ClientHello) |
| cipher suite | 4866 | 0x1302 | TLS_AES_256_GCM_SHA384 |
| cipher suite | 4865 | 0x1301 | TLS_AES_128_GCM_SHA256 |
| cipher suite | 4867 | 0x1303 | TLS_CHACHA20_POLY1305_SHA256 |
| cipher suite | 49196 | 0xc02c | unassigned / unknown |
| cipher suite | 49195 | 0xc02b | unassigned / unknown |
| cipher suite | 52393 | 0xcca9 | unassigned / unknown |
| cipher suite | 49200 | 0xc030 | unassigned / unknown |
| cipher suite | 49199 | 0xc02f | unassigned / unknown |
| cipher suite | 52392 | 0xcca8 | unassigned / unknown |
| cipher suite | 255 | 0x00ff | unassigned / unknown |
| extension | 45 | 0x002d | psk_key_exchange_modes |
| extension | 5 | 0x0005 | unassigned / unknown |
| extension | 11 | 0x000b | unassigned / unknown |
| extension | 10 | 0x000a | supported_groups |
| extension | 13 | 0x000d | signature_algorithms |
| extension | 23 | 0x0017 | unassigned / unknown |
| extension | 0 | 0x0000 | server_name |
| extension | 35 | 0x0023 | unassigned / unknown |
| extension | 43 | 0x002b | supported_versions |
| extension | 16 | 0x0010 | application_layer_protocol_negotiation |
| extension | 51 | 0x0033 | key_share |
| supported group | 29 | 0x001d | x25519 |
| supported group | 23 | 0x0017 | secp256r1 |
| supported group | 24 | 0x0018 | secp384r1 |
| point format | 0 | 0x0000 | uncompressed |
sources: IANA TLS Parameters (cipher suites, supported groups, point formats) ยท IANA TLS ExtensionType Values