80a3541b82
research: Add web attack detection report for claude
2026-05-29 06:06:36 +00:00
4a417a94fd
fix: catch subnet-directed broadcast in is_non_unicast guard
2026-05-29 04:05:45 +00:00
0973f61bfe
add: Add is_non_unicast guard before server_ports direction flip
2026-05-28 11:56:53 +00:00
2214616ca2
fix: exclude mDNS and LLMNR from server_ports heuristic
2026-05-28 11:33:24 +00:00
890406a4da
feat: skip XSK redirect for non-TCP/UDP and malformed packets and add Zeek-style server port heuristic for flow direction ( #17 )
2026-05-28 18:52:00 +08:00
22d0384c69
Feat/improve frontend ( #16 )
...
* wip
* wip
* wip
* redesign: slate-navy + sky accent color system and layout refresh
2026-05-25 20:01:00 +08:00
4e445932f6
chore: format code
2026-05-25 03:22:41 +00:00
d27af4e2e4
feat/complete-account-page ( #15 )
...
* wip
* wip
* wip
* wip
* wip
* docs: Delete LICENSE
* docs: Add GNU Affero General Public License v3
Added the GNU Affero General Public License version 3 to the project.
* feat: inline frontend submodule and add auth + access control improvements
* feat: Add live system log WebSocket API and frontend log viewer
2026-05-25 11:20:18 +08:00
5e146717d9
Fix/some issus ( #14 )
...
* wip
* feat: Add egress eBPF access control and fix Suricata HTTP port detection
* feat: adjust code with rustfmt
* feat: adjust code with rustfmt
* feat: Remove SERVICE stage from ingress eBPF pipeline
2026-05-23 16:35:27 +08:00
6eb64d36da
feat/account-api ( #13 )
...
* wip
* feat: change ebpf build path
* feat: change ebpf build path
* feat: add SQLCipher account DB, Argon2 password hashing, and JWT auth
* feat: add graceful shutdown on SIGINT
* feat: adjust code with rustfmt
* docs: edit README.md
2026-05-23 11:29:23 +08:00
46a69dd49c
refactor/rename-mantis ( #12 )
...
* refactor: Rename project from NetGuardia to Mantis
* fix: convert mantis-frontend from tracked files to submodule
* wip
* feat: Suricata integration stabilization and config unification
Fix a series of bugs in the Suricata daemon integration and unify
configuration so users interact only with config.toml.
* docs: sur-001-c1 Suricata integration stabilization findings
2026-05-22 18:42:51 +08:00
40d420a0d7
Fix/rule issus ( #11 )
...
* wip
* refactor: replace xsk_cpu_base with xsk_cpu_set for round-robin core distribution
* refactor: replace native vectorscan rule engine with Suricata daemon mode
* docs: overhaul TODO, research state, and CLAUDE.md post-Suricata refactor
2026-05-22 09:58:04 +08:00
d9c02047c5
feat/some-issus ( #10 )
...
* wip
* feat: Add two-level aggregator for scan/flood alert generation
2026-05-20 17:49:40 +08:00
537b2645fc
Feat/improve some issus ( #9 )
...
* wip
* wip
* feat: require full window fill before ONNX inference
* feat: require full window fill before ONNX inference
2026-05-20 14:23:59 +08:00
9ab78cc6a8
refactor/frontend-detection ( #7 )
...
* wip
* feat: Adapt detection page to UnifiedAlert API
2026-05-19 21:15:27 +08:00
99c2d74737
feat/ml-rule-fusion ( #6 )
...
* wip
* wip
* feat: auto-select native ORT or ort-tract backend based on .so presence and ML+Rule fusion decision layer
* wip
2026-05-19 15:56:43 +08:00
e686449a98
feat/optimized-inference-speed ( #5 )
...
* feat: complete rule scan, maybe
* feat: improve inference speed and timely stop for ^C and solve cpu race
2026-05-19 09:47:48 +08:00
5e42c137ae
Feat/optimized inference speed ( #4 )
...
* wip: todo 3
* docs: add CLAUDE.md with project context and conventions
* docs: research.md move to command folder
* docs: edit todo
* feat: use date-based CSV filename from startup, rotate on day change
* feat: PCRE, flowbits, flow:established, HOME_NET/EXTERNAL_NET
* wip
* feat: complete rule scan, maybe
2026-05-17 15:09:07 +08:00
856527247b
feat: switch inference engine from tract-onnx to ort-tract ( #3 )
2026-05-11 14:49:30 +08:00
56275151d9
Feat/improve csv record ( #2 )
...
* chore: new branch
* wip: todo 1
* fix: flush CSV writer after each record instead of only on shutdown
2026-05-11 14:26:14 +08:00
5f907c073c
Merge pull request #1 from ParrotXray/feat/rule-research
...
Feat/rule research
2026-05-08 19:07:01 +08:00
0d5fca3380
feat: using research for academic
2026-03-28 03:45:46 +00:00
