Releases: jelenamirkovic/AMON-SENSS
Patch for continuous reading
4.3.4 patched for continuous read
Support multiple input directories
This release supports multiple input directories, specified with -r as in:
amonsenss -r inputdir1 -r inputdir2
New version with shuffle fix
This fixes a bug for small networks that would never finish shuffling the data in databricks and thus would never progress from training to detection
Bugfix for non-Netflow files
There was a bug in reading non-Netflow data, which was fixed in this release.
Bugfixes and layering
In this release we fix some memory leaks. We also add layering to reduce false positives. Layering employes multiple layers of bins. Anomaly must be detected in each layer to lead to an alert being exported.
Further, we have renamed some files:
as.cc -> amonsenss.cc
executable target is now amonsenss
as.config -> amonsenss.config
amon-senss.config -> autoconfig
We have also added new files:
- A naive log rotate solution: files rotate and anum
- A perl script sum_alerts, which works like read_alerts but produces machine-readable alerts that you can then parse automatically if you like. This is useful if you have old traces that you want to process to evaluate AMON-SENSS.
contread
This release adds a feature for continuous reading of new files
v4.1
Bug fixes and making sure read_alerts generates START and STOP messages
New version 2021
In this new version we implement scalable bins, bin for different combinations of flow fields and improve configuration process.