anti 7756747787 fix: deduplicate sniffer fingerprint events ...

Same (src_ip, event_type, fingerprint) tuple is now suppressed within a
5-minute window (configurable via DEDUP_TTL env var). Prevents the bounty
vault from filling up with identical JA3/JA4 rows from repeated connections.

2026-04-14 01:24:44 -04:00

38 KiB

Raw Blame History

View Raw