Skip to content

Issues: stratosphereips/StratosphereLinuxIPS

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

281 Open 397 Closed
281 Open 397 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

The DNS of some evidence is still not whitelisted
#1250 opened Feb 18, 2025 by AlyaGomaa
Profiler error while parsing zeek files
#1242 opened Feb 12, 2025 by AlyaGomaa
Improve how slips detects DoH
#1237 opened Feb 11, 2025 by AlyaGomaa
4 tasks
Problem getting the percentage of analyzed flows correctly
#1229 opened Feb 10, 2025 by AlyaGomaa
Check if this is a FP "non-http established conn to port 80"
#1228 opened Feb 10, 2025 by AlyaGomaa
1
Check this trust model for improving the current one gsoc2023-performance GSoC 2023 Slips Performance Improvement
#1226 opened Feb 10, 2025 by eldraco Improve local P2P
@eldraco
Keep track of the PIDs of every opened thread in redis for easier debugging.
#1222 opened Feb 5, 2025 by AlyaGomaa
1
Problem exporting labeled flows
#1216 opened Feb 3, 2025 by AlyaGomaa
SQLite database is still locked in some inserts and Slips fails Bug Difficulty: Advanced Advanced python required
#1213 opened Feb 1, 2025 by eldraco
@AlyaGomaa
Long connections do not ignore broadcast Bug Difficulty: Beginners Stuff that you can do with skills for starters
#1212 opened Feb 1, 2025 by eldraco
@AlyaGomaa
Why do we have flush_db in the code and deltePrevDB in the config file? the first is overriding the second one. and we ALWAYS delete the prev db when Slips starts
#1206 opened Jan 31, 2025 by AlyaGomaa
use the entire evidence desctiption when checkinf for specific evidence in integration tests.
#1198 opened Jan 29, 2025 by AlyaGomaa
cps-collected-iocs.intel TI feed has one of microsoft IPs
#1194 opened Jan 29, 2025 by AlyaGomaa
Speedup get_all_contacted_ips_in_profileid_twid()
#1192 opened Jan 28, 2025 by AlyaGomaa
1
no need to download the TI files to disk then read them, instead use them directly.
#1191 opened Jan 28, 2025 by AlyaGomaa
Add to the docs how we do the queues to aggregate queries and where exactly we do that Documentation Related to documentation
#1170 opened Jan 14, 2025 by AlyaGomaa
@AlyaGomaa
handle_pending_queries() in ip_info can use a speedup, we can make it async and get rid of the waiting of 2 mins, for faster queries.
#1169 opened Jan 14, 2025 by AlyaGomaa
1
@aniket2405
1
Add a script to update Slips from inside docker.
#1165 opened Jan 14, 2025 by AlyaGomaa
Modify the documentation to say that modules wait in 'queues' until the needed information is available, and then they continue Documentation Related to documentation
#1164 opened Jan 14, 2025 by eldraco
@AlyaGomaa
Dont overwrite the output dir if -o is given with an existing output directory Improvement
#1150 opened Jan 7, 2025 by AlyaGomaa
@AlyaGomaa
the % of flows read don't show in the pcaps, but after the input process is done, we know the total floas to be processed by slips, we can then add the flows % to the stats using that number. Improvement
#1113 opened Dec 11, 2024 by AlyaGomaa
@AlyaGomaa
RNN CC Detection module has 25+ threads opened when analysing a large pcap. check why Improvement
#1108 opened Dec 9, 2024 by AlyaGomaa
@eldraco
1
GeoLite2-ASN.mmdb and GeoLite2-Country.mmdb are included in slips repo, download them on startup instead. They’re 11MB Improvement
#1103 opened Dec 3, 2024 by AlyaGomaa
1
Some threat intelligence lists have false positives. Slips should filter the easy ones. Bug Difficulty: Beginners Stuff that you can do with skills for starters Help wanted
#1094 opened Dec 1, 2024 by eldraco
@AlyaGomaa @AbhiramMasna
2
The 'Detected Long Connection' detection wrongly considers broadcast addresses. Bug Difficulty: Beginners Stuff that you can do with skills for starters Help wanted
#1093 opened Dec 1, 2024 by eldraco
@AlyaGomaa
ProTip! Follow long discussions with comments:>50.