Filter Sofa

Sofa

Description

This filter is a Darwin encapsulation for the Sofa algorithm.

It requires the associated python script to work (not provided). This algorithm is not open-source and will be used in a unique setup requiring the non generic development.

Filter Code

0x72676476

Dependencies

• Python 3.7 (exact version required)

Darwin configuration

Example of darwin configuration for this filter :

{
    "sofa_1": {
        "exec_path": "/path/to/darwin/build/darwin_sofa",
        "config_file":"/path/to/sofa.conf",
        "output": "NONE",
        "next_filter": "",
        "nb_thread": 1,
        "log_level": "DEBUG",
        "cache_size": 0
    }
}

Config file

• python_env_path: path of the python interpreter to use
• module: name of the python module to load
• function: the function to load from the module and call
• custom_python_path: path to the module's directory

Example :

{
  "python_env_path": "/home/vlt-os/env/bin/python",
  "module": "sofa",
  "function": "main",
  "custom_python_path": "/home/darwin/conf/fsofa/"
}

Body

[
    ["ip", "hostname", "os", "proto", "port"],
    [...]
]

Example

Here is an example of a body:

[
    ["192.168.1.18", "", "Linux 2.6.39", "tcp", "80"],
    ["192.168.1.31", "", "Microsoft Windows Server 2003 R2", "tcp", "21"]
]

Results

The result does not contain a certitude list.

Instead it contains a body itself containing a CSV.