2018-10-20 11:33 UTC

View Issue Details Jump to Notes ]
IDProjectCategoryView StatusLast Update
0004388Kali Linux[All Projects] New Tool Requestspublic2018-01-29 10:25
Assigned Tog0tmi1k 
PrioritynormalSeverityfeatureReproducibilityhave not tried
Product Version2017.3 
Target VersionFixed in Version 
Summary0004388: AIengine: It's a next generation interactive/programmable Python/Ruby/Java/Lua packet inspection engine
DescriptionAIEngine is a next generation interactive/programmable Python/Ruby/Java/Lua packet inspection engine with capabilities of learning without any human intervention, NIDS(Network Intrusion Detection System) functionality, DNS domain classification, network collector, network forensics and many others.

It also helps network/security professionals to identify traffic and develop signatures for use them on NIDS, Firewalls, Traffic classifiers and so on.

The main functionalities of AIEngine are:
- Support for interacting/programing with the user while the engine is running.
- Support for PCRE JIT for regex matching.
- Support for regex graphs (complex detection patterns).
- Support five types of NetworkStacks (lan,mobile,lan6,virtual and oflow).
- Support Sets and Bloom filters for IP searches.
- Support Linux, FreeBSD and MacOS operating systems.
- Support for HTTP,DNS and SSL Domains matching.
- Support for banned domains and hosts for HTTP, DNS, SMTP and SSL.
- Frequency analysis for unknown traffic and auto-regex generation.
- Generation of Yara signatures.
- Easy integration with databases (MySQL, Redis, Cassandra, Hadoop, etc...) for data correlation.
- Easy integration with other packet engines (Netfilter).
- Support memory clean caches for refresh stored memory information.
- Support for detect DDoS at network/application layer.
- Support for rejecting TCP/UDP connections.
- Support for network forensics on real time.
Steps To Reproducegit clone https://bitbucket.com/camp0/aiengine
make install
aiengine -h
Attached Files

duplicate of 0001938new AIEngine 



dookie (administrator)

This builds and runs well. It would make a good addition.


g0tmi1k (administrator)

Duplicate (0001938).

-Issue History
Date Modified Username Field Change
2017-12-05 11:28 j_jito New Issue
2017-12-18 21:09 dookie Note Added: 0007704
2018-01-26 11:21 g0tmi1k Relationship added duplicate of 0001938
2018-01-29 10:25 g0tmi1k Assigned To => g0tmi1k
2018-01-29 10:25 g0tmi1k Status new => closed
2018-01-29 10:25 g0tmi1k Resolution open => duplicate
2018-01-29 10:25 g0tmi1k Note Added: 0007918
+Issue History