csle_collector.snort_ids_manager.dao package

Submodules

csle_collector.snort_ids_manager.dao.snort_ids_alert module

class csle_collector.snort_ids_manager.dao.snort_ids_alert.SnortIdsAlert[source]

Bases: csle_base.json_serializable.JSONSerializable

Object representing an IDS Alert

static fast_log_parse(fast_log_str: str, year: int) → csle_collector.snort_ids_manager.dao.snort_ids_fast_log_alert.SnortIdsFastLogAlert[source]

Parses the IDS Alert from a given string from the fast-log of Snort

Parameters

fast_log_str – the fast log string to parse
year – the year

Returns

the priority, the class, and the time-stamp

static from_dict(parsed_stats_dict: Dict[str, Any]) → csle_collector.snort_ids_manager.dao.snort_ids_alert.SnortIdsAlert[source]

Parses a SnortIdsAlert object from a dict

Parameters: parsed_stats_dict – the dict to parse
Returns: the parsed SnortIdsAlert object

static from_json_file(json_file_path: str) → csle_collector.snort_ids_manager.dao.snort_ids_alert.SnortIdsAlert[source]

Reads a json file and converts it to a DTO

Parameters: json_file_path – the json file path
Returns: the converted DTO

static parse_from_str(csv_str_record: str, year: int) → csle_collector.snort_ids_manager.dao.snort_ids_alert.SnortIdsAlert[source]

Parses the IDS alert from a string

Parameters

csv_str_record – the string to parse
year – the year of the entry

Returns

the parsed IDS Alert

set_priority(priority: int) → None[source]

Sets the priority of the alert DTO

Parameters: priority – the priority to set
Returns: None

to_dict() → Dict[str, Any][source]

Converts the object to a dict representation

Returns: a dict representation of the object

csle_collector.snort_ids_manager.dao.snort_ids_alert_counters module

class csle_collector.snort_ids_manager.dao.snort_ids_alert_counters.SnortIdsAlertCounters[source]

Bases: csle_base.json_serializable.JSONSerializable

DTO containing statistics from the Snort IDS log

add(alert_counters: csle_collector.snort_ids_manager.dao.snort_ids_alert_counters.SnortIdsAlertCounters) → None[source]

Adds another alert counters object to this one

Parameters: alert_counters – the counters to add
Returns: None

copy() → csle_collector.snort_ids_manager.dao.snort_ids_alert_counters.SnortIdsAlertCounters[source]

Returns: a copy of the object

count(alerts: List[csle_collector.snort_ids_manager.dao.snort_ids_fast_log_alert.SnortIdsFastLogAlert]) → None[source]

Counts the list of alerts

Parameters: alerts – list of alerts from the log
Returns: None

static from_dict(d: Dict[str, Any]) → csle_collector.snort_ids_manager.dao.snort_ids_alert_counters.SnortIdsAlertCounters[source]

Converts a dict representaion of the object into an instance

Parameters: d – the dict to convert
Returns: the DTO

static from_json_file(json_file_path: str) → csle_collector.snort_ids_manager.dao.snort_ids_alert_counters.SnortIdsAlertCounters[source]

Reads a json file and converts it to a DTO

Parameters: json_file_path – the json file path
Returns: the converted DTO

static from_kafka_record(record: str) → csle_collector.snort_ids_manager.dao.snort_ids_alert_counters.SnortIdsAlertCounters[source]

Converts a kafka record to a DTO

Parameters: record – the kafka record to convert
Returns: the DTO

get_deltas(counters_prime: csle_collector.snort_ids_manager.dao.snort_ids_alert_counters.SnortIdsAlertCounters) → Tuple[List[int], List[str]][source]

Get the deltas between two counters objects

Parameters: counters_prime – the counters object to compare with
Returns: the deltas and the labels

num_attributes() → int[source]

Returns: The number of attributes of the DTO

static schema() → csle_collector.snort_ids_manager.dao.snort_ids_alert_counters.SnortIdsAlertCounters[source]

Returns: get the schema of the DTO

to_dict() → Dict[str, Any][source]

Converts the object to a dict representation

Returns: a dict representation of the object

to_dto(ip: str) → snort_ids_manager_pb2.SnortIdsLogDTO[source]

Converts the object into a gRPC DTO for serialization

Parameters: ip – the ip to add to the DTO in addition to the statistics
Returns: A csle_collector.snort_ids_manager.snort_ids_manager_pb2.IdsLogDTOb

to_kafka_record(ip: str) → str[source]

Converts the DTO into a kafka record

Parameters: ip – the ip to add to the record in addition to the IDS statistics
Returns: a comma-separated string representing the kafka record

update_with_kafka_record(record: str) → None[source]

Updates the DTO with a kafka record

Parameters: record – the kafka record to use for updating
Returns: None

csle_collector.snort_ids_manager.dao.snort_ids_fast_log_alert module

class csle_collector.snort_ids_manager.dao.snort_ids_fast_log_alert.SnortIdsFastLogAlert(timestamp: float, priority: int, class_id: int, source_ip: str, target_ip: str, rule_id: str)[source]