Skip to content

Slips v1.1.20#1929

Merged
AlyaGomaa merged 177 commits intomasterfrom
develop
Apr 30, 2026
Merged

Slips v1.1.20#1929
AlyaGomaa merged 177 commits intomasterfrom
develop

Conversation

@AlyaGomaa
Copy link
Copy Markdown
Collaborator

@AlyaGomaa AlyaGomaa commented Apr 30, 2026

  • Add optional live Slips auto-update feature.
  • Fix daemon shutdown with -S.
  • Fix web interface startup, along with flow view and profile refresh handling.
  • Move Kalipso to a submodule.
  • Add DoS protection for high-throughput Zeek input, with configurable sampling windows and skip thresholds.
  • Reorganize Slips output directory so alerts, databases, and persistent artifacts are stored in dedicated directories.
  • Improve bloom filters.
  • Update the organizations IPs, domains and ASNs lists.
  • Improve Whitelists.
  • Improve ASN lookups.

AlyaGomaa and others added 30 commits March 12, 2026 00:14
@AlyaGomaa
icore: calc the flows per second for a module based on total number o…
197ef5e 
…f flows seen in 1 min (instead of 5)
@AlyaGomaa
add a DoS detector that runs when the input flows read per min exceed…
3d924c7 
…s 2000
@AlyaGomaa
DoS detector: get the number of flows to skip based on the flows per …
3e4193e 
…min analyzed by input.py
@AlyaGomaa
DoS detector: make the 1 min sampling time window configurable
16a65f3
@AlyaGomaa
read_zeek_files: skip flows when the DoS detector decides to
4d25b5c
@AlyaGomaa
print a warning when slips starts skipping flows due to DoS protection
f79363f
@AlyaGomaa
stress_testing: delete irrelevant info
6508a2b
@AlyaGomaa
Merge remote-tracking branch 'origin/develop' into alya/immune/DoS_pr…
7fd2030 
…otection
@AlyaGomaa
add logging for when slips starts and stops sampling flows
1351eac
@AlyaGomaa
dont print a msg saying that slips stoppped sampling when it's still …
5a3541e 
…unsure whether to stop sampling or not
@AlyaGomaa
add unit tests for dos protector
9ff1d1c
@AlyaGomaa
update test_input unit tests
4fd59ef
@AlyaGomaa
Merge pull request #1863 from stratosphereips/alya/immune/DoS_protection
24a40e5 
DoS protection
@AlyaGomaa
improve AGENTS.md
0fdda95
@AlyaGomaa
place module logs in output/module_name/ and .sqlite dbs in output/da…
93a68a3 
…tabases/
@AlyaGomaa
update secrets baseline
5440185
@AlyaGomaa
unify module names and use snake_case
c09a24e
@AlyaGomaa
update the docs with new names
ebf59d2
@AlyaGomaa
update unit tests
37882b0
@AlyaGomaa
rename brute_forcing module to brute_force_detector following the X_Y…
c5e204c 
…_doer naming convention
@AlyaGomaa
rename brute_forcing module to brute_force_detector following the X_Y…
5662ab0 
…_doer naming convention
@AlyaGomaa
update unit tests of brute_forcing module
2e042a6
@harpomaxx
update Immune.md with finetuning documentation links
9887f0a
@harpomaxx
add new finetuning reports
49045fe
@harpomaxx
remove refence to skill
fddab21
@harpomaxx
add quantization analysis
9727e9e
@harpomaxx
fix tldr lines
7cad615
@AlyaGomaa
fix -ap parameter usage
88dbc3e
@AlyaGomaa
add output_files to return the output sqlite path or the db dir
a77bcac
@AlyaGomaa
update sercrets baseline
ea0ded7
AlyaGomaa added 26 commits April 29, 2026 00:10
@AlyaGomaa
make arp poisoner module check for the existence of arp-scan tool bef…
44bdbbe 
…ore starting
@AlyaGomaa
avoid integration tests changing permanent p2p dbs and config files
92f3998
@AlyaGomaa
avoid fides unit tests creating an empty ":memory:" file.
a330fef
@AlyaGomaa
update unit tests
22e93c5
@AlyaGomaa
make sure the needed redis server is started before each integration …
890a260 
…test runs
@AlyaGomaa
run_all_tests.sh: auto-discover integration tests
670db48
@AlyaGomaa
fix fides integration test
df3c5ce
@AlyaGomaa
fix iris integration test
e665512
@AlyaGomaa
fix GH workflow not uploading artifacts
cbd77e1
@AlyaGomaa
make sure no 2 integration tests try to use the same redis port
4da218b
@AlyaGomaa
GH CI: better naming for uploaded artifacts
6e0e088
@AlyaGomaa
fix fidex integration test
c25a20b
@AlyaGomaa
fix ci name sanitization
1d4a716
@AlyaGomaa
fides.py: rollback config file changes
afc3458
@AlyaGomaa
fides.py: fix the logger
7b52475
@AlyaGomaa
fides.py: use the version of th emsg as the cur slips version
ec2518d
@AlyaGomaa
test_Fides: improve logging and msg versioning
2f574fb
@AlyaGomaa
fix fides config test
a765be6
@AlyaGomaa
del debugging print
4126f3b
@AlyaGomaa
fix unit tests
2a54e55
@AlyaGomaa
Merge pull request #1928 from stratosphereips/alya/improve_integratio…
4faae5a 
…n_tests

Improve integration tests
@AlyaGomaa
fix issues with the web interface
097c99d
@AlyaGomaa
refactor _init_whitelisted_orgs_bf()
1e51e51
@AlyaGomaa
fix problem stopping slips daemon
037c962
@AlyaGomaa
update slips version to 1.1.20 and update changelog
b9414e1
@AlyaGomaa
update update.json
634a916
@github-project-automation github-project-automation Bot moved this to Todo in Slips Apr 30, 2026
@AlyaGomaa AlyaGomaa merged commit 5857dd3 into master Apr 30, 2026
101 checks passed
@github-project-automation github-project-automation Bot moved this from Todo to Done in Slips Apr 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

Slips
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@AlyaGomaa @harpomaxx