I'd be really curious what you're hoping to catch though, because in the few times I've used ja3, its been for finger printing clients to a server/service, not for clients which are (presumably) making mostly outbound connections.