Local web page by eldraco · Pull Request #2063 · stratosphereips/StratosphereLinuxIPS

eldraco · 2026-08-28T12:15:19Z

This large PR adds the local webpage of slips. A full webpage that allows to monitor almost all aspects of Slips

Changes proposed

Added a new localhost-only web interface for one Slips run.
Added Overview, Alerts, Evidence, Hosts, Firewall, P2P, Configuration, and Whitelists tabs.
Added sortable/filterable tables, bounded pagination, time ranges, charts, and evidence-to-flow drill-down.
Persisted alerts, evidence, relationships, real Slips scores, whitelist decisions, and historical metrics in SQLite.
Added detailed host workspaces with traffic, identity, DNS/TI, evidence, alerts, and score history.
Added firewall block/probation status, unblock schedules, history, and estimated attacks stopped.
Added P2P peer connectivity, messaging, trust, and reliability history.
Limited port-scan evidence to 20 linked flows.
Improved web performance by eliminating repeated full Redis scans.
Improved shutdown/web lifecycle, scoring concurrency, Redis run isolation, documentation, and tests.

Steps you followed to test the changes purposed in this PR:

a lot of manual test
CI tests
added tests
run local slips tests

Check List (Check all the applicable boxes)

My code follows the code style of this project.
[ x My change requires changes to the documentation.
I have updated the documentation accordingly.
All new and existing tests passed.
This PR does not contain plagiarized content.
The title of my pull request is a short description of the requested changes.
My PR is based on develop branch. (mandatory)

…ule metadata

…metadata updates

…nd error handling

…ck deadlines

…ry information

…unDataReader

…ement

…ling

…r better clarity on Slips scores

…ing logic

… displayed metrics and sorting behavior

…tadata sections

…a/logs endpoints

…ration

…ntil requested

…quests

…ter UX

# Conflicts: # docs/web_interface.md # modules/web_interface/app.js # modules/web_interface/server.py # slips/main.py # slips_files/core/evidence_handler_worker.py # tests/unit/modules/web_interface/test_server.py

…re a root owned sqlite flock

…ips, instead of using time.time()

…prove Go executable check

github-project-automation Bot added this to Slips Aug 28, 2026

github-project-automation Bot moved this to Todo in Slips Aug 28, 2026

eldraco added 28 commits September 1, 2026 21:42

Enhance web interface documentation and add unit tests for iptables r…

abbc95b

…ule metadata

Enhance documentation on iptables rule management and unblocking process

4d26789

Add interactive firewall rule management during Slips shutdown

31bbe7c

Enhance IP blocking functionality with recovery state management and …

1d1e8ca

…metadata updates

Enhance iptables command handling with improved metadata management a…

d506f3b

…nd error handling

Add function to check for managed firewall rules in slips chain

5901986

Refactor unblock request handling and improve error logging for unblo…

3c349a0

…ck deadlines

Enhance firewall table rendering to include 'stale' status and recove…

73e4faf

…ry information

Update stylesheet and script version for firewall recovery enhancements

5618dfb

Enhance recovery status handling and include additional metadata in R…

a29fbc8

…unDataReader

Refactor AlertHandler methods for improved readability and consistency

ba08606

Add tests for interactive firewall shutdown decisions and state manag…

89bad87

…ement

Enhance firewall rule recovery tests and improve metadata handling

ec5c3bc

Refactor unblock test to simplify parameters and improve clarity

edc0d94

Update firewall test to reflect new recovery metadata and status hand…

dd924e9

…ling

Enhance host list description to include maximum real score column fo…

f206752

…r better clarity on Slips scores

Add function to render highest persisted real Slips score for hosts

55c7825

Add peak Slips score column to hosts table and update script version

e75e8d5

Add peak alert score calculation to RunDataReader for enhanced host data

17368a5

Add test for sorting hosts by past peak Slips score and update render…

58f2bbe

…ing logic

Update overview section in web interface documentation for clarity on…

c840582

… displayed metrics and sorting behavior

Enhance overview rendering and page title updates with new log and me…

475509a

…tadata sections

Refactor overview and logs sections for improved usability and clarity

e4c110a

Add firewall overview, metadata, and logs endpoints to API

8e7ed36

Update tab styles for improved layout and add logs table styling

5b5e35d

Add tests for operational overview, firewall transitions, and metadat…

3959062

…a/logs endpoints

Update web interface configuration to bind to localhost

f109548

Update web interface documentation for clarity on binding and configu…

3dc37ab

…ration

eldraco and others added 15 commits September 2, 2026 02:28

Add tests to filter P2P tagged evidence from scoring and blocking

fe8f6ff

Add tests for P2P handshake flow tagging and unrelated flow handling

527debf

Add tests for authenticated P2P connection state and flow matching

ac432cb

Fix flow processing to handle single-row DataFrame correctly

02d0b19

Add test to handle empty flow tags in process_flow method

8534157

Update Pigeon authenticated connection support

fbc8f47

Build Redis core explicitly in Docker

862196e

Show backend disconnection in web header

9bb6ff1

Enhance Overview response performance by deferring evidence loading u…

335b25b

…ntil requested

Add evidence loading functionality to overview with user-triggered re…

e38f0e2

…quests

Add load evidence counts button to modules section in overview

ab43283

Add overview_evidence_counts method to retrieve exact evidence totals

7ccff92

Add table-actions styling and adjust secondary button opacity for bet…

913f5ed

…ter UX

Add tests for overview evidence counts and optimize data retrieval

09cfb63

Merge remote-tracking branch 'origin/local-web-page' into local-web-page

109c112

# Conflicts: # docs/web_interface.md # modules/web_interface/app.js # modules/web_interface/server.py # slips/main.py # slips_files/core/evidence_handler_worker.py # tests/unit/modules/web_interface/test_server.py

AlyaGomaa mentioned this pull request Sep 2, 2026

fix problem acquiring sqlite flock when running slips as root #2073

Closed

AlyaGomaa added 3 commits September 2, 2026 18:06

refactor _block_ip()

8136182

fix permission error that happens when a non-root user tries to acqui…

1fad0c9

…re a root owned sqlite flock

blocking: get the cur window from the db so its consistent accross sl…

b2dfa9f

…ips, instead of using time.time()

AlyaGomaa mentioned this pull request Sep 2, 2026

blocked ips list keeps growing unbounded, cap it. #2075

Closed

AlyaGomaa and others added 5 commits September 2, 2026 19:35

reset p2p msg counters per timewindow to ensure they dont grow forever

dba084b

add a badge in the p2p stats saying that it's per timewindow

93e6325

fix problem with BLOCKED_IPS growing unbounded. cap it at 200 ips

3ffd78f

Refactor test to dynamically determine pigeon source directory and im…

5341cd0

…prove Go executable check

Merge remote-tracking branch 'origin/local-web-page' into local-web-page

cab9118

Navigation Menu

Uh oh!

Local web page - #2063

Local web page#2063
eldraco wants to merge 1133 commits into
developfrom
local-web-page

eldraco commented Aug 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

eldraco commented Aug 28, 2026

Changes proposed

Steps you followed to test the changes purposed in this PR:

Check List (Check all the applicable boxes)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants