mirror of
https://github.com/ParrotXray/Mantis.git
synced 2026-08-24 19:00:27 +09:00
ParrotXray
46a69dd49c
* refactor: Rename project from NetGuardia to Mantis * fix: convert mantis-frontend from tracked files to submodule * wip * feat: Suricata integration stabilization and config unification Fix a series of bugs in the Suricata daemon integration and unify configuration so users interact only with config.toml. * docs: sur-001-c1 Suricata integration stabilization findings
302 lines
6.2 KiB
JSON
302 lines
6.2 KiB
JSON
{
|
|
"ae_feature_names": [
|
|
"flow_duration",
|
|
"fwd_packets",
|
|
"bwd_packets",
|
|
"fwd_bytes",
|
|
"bwd_bytes",
|
|
"flow_bytes_per_sec",
|
|
"flow_pkts_per_sec",
|
|
"fwd_win_bytes",
|
|
"bwd_win_bytes",
|
|
"fwd_pkt_len_mean",
|
|
"bwd_pkt_len_mean",
|
|
"fwd_iat_mean",
|
|
"bwd_iat_mean",
|
|
"flow_iat_mean",
|
|
"pkt_len_mean",
|
|
"dst_port",
|
|
"protocol",
|
|
"psh_flag_cnt",
|
|
"ack_flag_cnt",
|
|
"syn_flag_cnt",
|
|
"fin_flag_cnt",
|
|
"rst_flag_cnt",
|
|
"pkt_len_std",
|
|
"fwd_pkt_len_std",
|
|
"bwd_pkt_len_std",
|
|
"fwd_seg_size_min",
|
|
"fwd_act_data_pkts",
|
|
"flow_iat_std",
|
|
"flow_iat_max",
|
|
"flow_iat_min",
|
|
"active_mean",
|
|
"active_std",
|
|
"active_max",
|
|
"active_min",
|
|
"idle_mean",
|
|
"idle_std",
|
|
"idle_max",
|
|
"idle_min",
|
|
"down_up_ratio"
|
|
],
|
|
"ae_clip_params": {
|
|
"flow_duration": {
|
|
"lower": 0.0,
|
|
"upper": 90036772.0
|
|
},
|
|
"fwd_packets": {
|
|
"lower": 1.0,
|
|
"upper": 1000.0
|
|
},
|
|
"bwd_packets": {
|
|
"lower": 0.0,
|
|
"upper": 1000.0
|
|
},
|
|
"fwd_bytes": {
|
|
"lower": 0.0,
|
|
"upper": 8830666.319999935
|
|
},
|
|
"bwd_bytes": {
|
|
"lower": 0.0,
|
|
"upper": 714812.8399999992
|
|
},
|
|
"flow_bytes_per_sec": {
|
|
"lower": 0.0,
|
|
"upper": 282000000.0
|
|
},
|
|
"flow_pkts_per_sec": {
|
|
"lower": 0.06663872375999999,
|
|
"upper": 1000000.0
|
|
},
|
|
"fwd_win_bytes": {
|
|
"lower": 0.0,
|
|
"upper": 65535.0
|
|
},
|
|
"bwd_win_bytes": {
|
|
"lower": 0.0,
|
|
"upper": 65535.0
|
|
},
|
|
"fwd_pkt_len_mean": {
|
|
"lower": 0.0,
|
|
"upper": 1445.1847187404396
|
|
},
|
|
"bwd_pkt_len_mean": {
|
|
"lower": 0.0,
|
|
"upper": 1396.7002398081536
|
|
},
|
|
"fwd_iat_mean": {
|
|
"lower": 0.0,
|
|
"upper": 45015621.68
|
|
},
|
|
"bwd_iat_mean": {
|
|
"lower": 0.0,
|
|
"upper": 45016786.3
|
|
},
|
|
"flow_iat_mean": {
|
|
"lower": 0.0,
|
|
"upper": 18007572.2
|
|
},
|
|
"pkt_len_mean": {
|
|
"lower": 0.0,
|
|
"upper": 1173.8309073821652
|
|
},
|
|
"dst_port": {
|
|
"lower": 53.0,
|
|
"upper": 63717.0
|
|
},
|
|
"protocol": {
|
|
"lower": 6.0,
|
|
"upper": 17.0
|
|
},
|
|
"psh_flag_cnt": {
|
|
"lower": 0.0,
|
|
"upper": 2327.119999999879
|
|
},
|
|
"ack_flag_cnt": {
|
|
"lower": 0.0,
|
|
"upper": 8954.119999999879
|
|
},
|
|
"syn_flag_cnt": {
|
|
"lower": 0.0,
|
|
"upper": 3.0
|
|
},
|
|
"fin_flag_cnt": {
|
|
"lower": 0.0,
|
|
"upper": 2.0
|
|
},
|
|
"rst_flag_cnt": {
|
|
"lower": 0.0,
|
|
"upper": 3.0
|
|
},
|
|
"pkt_len_std": {
|
|
"lower": 0.0,
|
|
"upper": 723.0567403120758
|
|
},
|
|
"fwd_pkt_len_std": {
|
|
"lower": 0.0,
|
|
"upper": 669.6453360147468
|
|
},
|
|
"bwd_pkt_len_std": {
|
|
"lower": 0.0,
|
|
"upper": 713.1937558148791
|
|
},
|
|
"fwd_seg_size_min": {
|
|
"lower": 8.0,
|
|
"upper": 32.0
|
|
},
|
|
"fwd_act_data_pkts": {
|
|
"lower": 0.0,
|
|
"upper": 6158.0
|
|
},
|
|
"flow_iat_std": {
|
|
"lower": 0.0,
|
|
"upper": 24649410.54370532
|
|
},
|
|
"flow_iat_max": {
|
|
"lower": 0.0,
|
|
"upper": 45015173.0
|
|
},
|
|
"flow_iat_min": {
|
|
"lower": 0.0,
|
|
"upper": 3100010.0
|
|
},
|
|
"active_mean": {
|
|
"lower": 0.0,
|
|
"upper": 1858202.1999999958
|
|
},
|
|
"active_std": {
|
|
"lower": 0.0,
|
|
"upper": 279498.7479113591
|
|
},
|
|
"active_max": {
|
|
"lower": 0.0,
|
|
"upper": 2056578.1199999999
|
|
},
|
|
"active_min": {
|
|
"lower": 0.0,
|
|
"upper": 1858202.1999999958
|
|
},
|
|
"idle_mean": {
|
|
"lower": 0.0,
|
|
"upper": 45010596.68
|
|
},
|
|
"idle_std": {
|
|
"lower": 0.0,
|
|
"upper": 10972860.696148252
|
|
},
|
|
"idle_max": {
|
|
"lower": 0.0,
|
|
"upper": 45015173.0
|
|
},
|
|
"idle_min": {
|
|
"lower": 0.0,
|
|
"upper": 45007631.12
|
|
},
|
|
"down_up_ratio": {
|
|
"lower": 0.0,
|
|
"upper": 5.444444444444445
|
|
}
|
|
},
|
|
"ae_scaler_mean": [
|
|
4174370.511260209,
|
|
35.077125227753555,
|
|
43.603742620662935,
|
|
94540.6390955523,
|
|
31544.833137720616,
|
|
5700335.998200838,
|
|
64420.30126318614,
|
|
15402.278083818182,
|
|
13973.66057455727,
|
|
135.26851684254757,
|
|
238.80296412254205,
|
|
1293324.141483505,
|
|
1251472.1995950716,
|
|
626966.5016614087,
|
|
233.05930315060152,
|
|
13901.66964997682,
|
|
12.74627202988346,
|
|
28.442853402550725,
|
|
130.61406194165673,
|
|
0.4689990174082605,
|
|
0.3915667678092468,
|
|
0.21319133979094493,
|
|
185.2423670450406,
|
|
76.31524566862126,
|
|
127.66733088327213,
|
|
14.869121582478313,
|
|
71.42925735436108,
|
|
844289.4205128999,
|
|
1871843.3831297588,
|
|
63833.28663900627,
|
|
36457.0877495644,
|
|
1979.3342059564893,
|
|
41017.9994462398,
|
|
33138.51555644357,
|
|
1285209.472977435,
|
|
145136.79037385262,
|
|
1459564.2663853113,
|
|
1159966.9567245154,
|
|
1.0590955405607951
|
|
],
|
|
"ae_scaler_std": [
|
|
10650950.18334552,
|
|
136.8344169199878,
|
|
144.5115931391652,
|
|
782315.1008220705,
|
|
115570.0690727939,
|
|
32890823.417328414,
|
|
244307.2905207503,
|
|
27272.95960331544,
|
|
25822.193228375105,
|
|
280.69989894222357,
|
|
400.95500103180973,
|
|
4809694.778465536,
|
|
5115143.491867724,
|
|
2118478.305631722,
|
|
323.5724207730803,
|
|
19307.274125529486,
|
|
5.3569399872996675,
|
|
201.78527220105093,
|
|
829.8816645804447,
|
|
0.8517415939053568,
|
|
0.7865420474337967,
|
|
0.6338316882067397,
|
|
245.5835792107576,
|
|
132.28322289134556,
|
|
199.89372134081543,
|
|
9.422620001273858,
|
|
546.5627544755516,
|
|
3076994.7662497265,
|
|
6282162.411486724,
|
|
354650.61908769683,
|
|
200092.88064741812,
|
|
21452.1321729186,
|
|
224937.60657079276,
|
|
194015.24605866344,
|
|
5833091.863698758,
|
|
1112258.2562796574,
|
|
6361960.657867311,
|
|
5591493.860273778,
|
|
0.8486496279087917
|
|
],
|
|
"ae_post_clip_min": -5.0,
|
|
"ae_post_clip_max": 5.0,
|
|
"ae_thresholds": {
|
|
"90": 0.01886444352567196,
|
|
"91": 0.020988615229725838,
|
|
"92": 0.023535393178462982,
|
|
"93": 0.02664916217327118,
|
|
"94": 0.03065456449985504,
|
|
"95": 0.03615476191043854,
|
|
"96": 0.044667694717645645,
|
|
"97": 0.06003328785300255,
|
|
"98": 0.09323157370090485,
|
|
"99": 0.12769243121147156,
|
|
"mean+2std": 0.05561847239732742,
|
|
"mean+1std": 0.031917501240968704,
|
|
"Q3+1.5IQR": 0.013699173461645842,
|
|
"Q3+3.0IQR": 0.0217638174071908
|
|
},
|
|
"window_size": 10
|
|
} |