Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Roadmap #2537

Open
IvanNardi opened this issue Aug 30, 2024 · 5 comments
Open

Roadmap #2537

IvanNardi opened this issue Aug 30, 2024 · 5 comments
Labels

Comments

@IvanNardi
Copy link
Collaborator

Just some non-commital ideas of features/protocols/algorithms to add (or delete) before the next release.
Feel free to add anything in the comments

@IvanNardi IvanNardi pinned this issue Aug 30, 2024
@0xA50C1A1
Copy link
Contributor

0xA50C1A1 commented Aug 30, 2024

I thought it might be nice to add support for the protocol used by the Lustre parallel file system. I've noticed that sessions start with a few identical short packets. However, I only have two pcap files with traffic that I captured on my test setup, so I can’t be completely sure about the pattern.

Here's the pcap samples: lustrefs.zip

@0xA50C1A1
Copy link
Contributor

Also I’d recommend either removing the Armagetron protocol dissector (because barely anyone plays it anymore) or revamping it since it’s been broken for a while and the game now uses a different protocol.

Here’s a pcap example with the current traffic: armagetron_udp.zip

@mmanoj
Copy link
Contributor

mmanoj commented Sep 6, 2024

Can we create the agenda/wish list we can address with next roadmap.From my side I'm adding following.
1.VPN and Anonymize/proxy detection in encrypted traffic with ML/DL,
2.Adding more popular services and protocols (we can create list later)
3.Adding more detection techniques / algorithms with AI/ML

@utoni
Copy link
Collaborator

utoni commented Sep 7, 2024

I would also like to have a way to automatically check for possible protocol dissector changes (i.e. via documentation URL in doc/) periodically.

@aouinizied
Copy link
Collaborator

do not hesitate for direct ping when it comes to AI/ML, what I would like the most:

  • make Python bindings working again (long overdue) with automatic package publishing on Pypi.
  • integrate a PoC with ONNX runtime and make ML models loadable on a set of fixed features.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

5 participants