Slips v1.0.6 #375

AlyaGomaa · 2023-06-30T14:10:49Z

Store flows in SQLite database in the output directory instead of Redis.
55% RAM usage decrease.
Support the labeling of flows based on Slips detections.
Add support for exporting labeled flows in JSON and tsv formats.
Code improvements. Change the structure of all modules.
Graceful shutdown of all modules thanks to @danieltherealyang
Print the number of evidence generated by Slips when running on PCAPs and interface.
Improved the detection of ports that belong to a specific organization.
Fix bugs in CYST module.
Fix URLhaus evidence description.
Fix the freezing progress bar issue.
Fix problem starting Slips in docker in Linux.
Ignore ICMP scans if the flow has ICMP type 3
Improve our whitelist. Slips now checks for whitelisted attackers and victims in the generated evidence.
Add embedded documentation in the web interface thanks to @shubhangi013
Improved the choosing of random Redis ports using the -m parameter.

…e process manager

…les as it's handled in abstracts.py

…output process

…termination event instead

…g later

…en 15 mins pass)

…en 15 mins pass

…ocesses to finish

…itlist order

…h processes are still alive

…e still alive

…the db, don't override it

…le (so not just for debugging)

…fix_cyst_module

…dicator' into develop

Fix CYST module

…ing_-m fix invalid analysis time when using -m and change how slips gets a random redis port to use

Fix stopping daemon and input process

AlyaGomaa added 30 commits June 20, 2023 17:13

start output proc by the process_manager

e3fa06e

start profiler proc by the process_manager

b6e8463

start input proc by the process_manager

4372dbb

move all the printing of of core files and the handling of PIDs to th…

1481243

…e process manager

remove the try except wrapping of all main() functions in the core fi…

e0370e6

…les as it's handled in abstracts.py

slips.py: store the list of all children

e1e1310

proc_man: make all modules and core files aware of the termination event

ef7055e

abstracts: handle the termination event in all modules

f775eed

abstracts: fix handling the termination event in evidence, input and …

755d55e

…output process

profiler: handle termination event and empty queue

6af98ff

input: use the interface's get_msg() instead of the db's

793d259

handle the termination event in the abstracts instead of the modules

85a31d8

don't check for the stop_process msg in should_stop(), check for the …

9545551

…termination event instead

add a function to return the pid given the module name

8dd01fb

rename all module classes to be able to debug which process is hangin…

fb157ec

…g later

change how we keep track of the number of stopped modules

9422e1a

add a function that returns the name of the module given its PID

a86ae83

proc_man: change the way we kill all children (on double ctrl c or wh…

c6a7b30

…en 15 mins pass)

proc_man: handling the killing of all children on double ctrl c or wh…

85f7527

…en 15 mins pass

proc_man: update how slips warns about pending modules and updatemanager

2a797dd

proc_man: change how slips waits for processes to end

dde71b8

proc_man: first wait for all modules o finishd, then wait for core pr…

969fcf6

…ocesses to finish

proc_man: optimize warn_about_pending_modules()

c6b10bb

proc_man: use process objs instead of list of PIDs when getting the h…

821a816

…itlist order

proc_man: use process objs instead of list of PIDs when checking whic…

c94ad88

…h processes are still alive

proc_man: update the list modules to kill based on which processes ar…

058e269

…e still alive

proc_man: remove dead code

adda2ba

proc_man: fix error calculating the timeout

45a1dbe

proc_man: change how we get the method start time

8fec7f2

abstracts: shutdown gracefully on keyboard int

3444c33

AlyaGomaa added 29 commits June 29, 2023 14:27

cyst: if cyst module is enabled, store it in the db

6c8602a

if the same port/proto belongs to more than 1 org, store them all in …

1599f95

…the db, don't override it

cyst: change the way slips checks if cyst module is enabled

3e7d8cd

cyst: Add more organized debugging prints that will always be availab…

a6920cd

…le (so not just for debugging)

cyst: change the way slips checks if cyst module is enabled

9b5b99f

cyst: Add more organized debugging prints that will always be availab…

031618e

…le (so not just for debugging)

profiler: fix problem checking is cyst is enabled

809811c

cyst: Add more organized debugging prints that will always be availab…

7e90cc8

…le (so not just for debugging)

Merge remote-tracking branch 'origin/alya/fix_cyst_module' into alya/…

9b90ef2

…fix_cyst_module

add an indicator in slips.log that slips was shutdown gracefully

6108b5c

Merge remote-tracking branch 'origin/alya/add_a_gracefull_shutdown_in…

5e364b3

…dicator' into develop

flowalerts: fix error checking if the org name belongs to src or dst mac

7dc469a

flowalerts: add the number of evidence added in interface and pcaps

6974977

fix unable to get output queue when using -m

019ef1c

Merge pull request #370 from stratosphereips/alya/fix_cyst_module

1fc1545

Fix CYST module

change the way slips gets an unused port when using -m

cc5cd19

Merge pull request #373 from stratosphereips/alya/fix_output_queue_us…

0bc10ff

…ing_-m fix invalid analysis time when using -m and change how slips gets a random redis port to use

update CHANGELOG.md

09a1549

update Slips version to 1.0.6

1712ec7

db: add a method to get the current used file

a6b7ea2

daemon: set the proc_man slips logfile manually

856826c

proc_man: kill process tree each time slips needs to kill 1 process

654e8aa

fix problem stopping inputproc on ctrl+c

9c36f9e

proc_man: handle closing output queue with -S

1a39dd2

update slips.gif to use v1.0.6

38a7662

web inetrface: fix err getting the db obj

9defa67

Merge pull request #374 from stratosphereips/alya/fix-stopping-daemon

541afda

Fix stopping daemon and input process

Ci-prod-testing: run integration tests serially

15ac44d

Merge remote-tracking branch 'origin/develop' into develop

2c83cb0

AlyaGomaa merged commit 87c52b6 into master Jun 30, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Slips v1.0.6 #375

Slips v1.0.6 #375

AlyaGomaa commented Jun 30, 2023

Slips v1.0.6 #375

Slips v1.0.6 #375

Conversation

AlyaGomaa commented Jun 30, 2023