<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0"></p>
<div autoid="_rp_2" role="list" tabindex="-1" aria-label="Conversation">
<div tabindex="-1">
<div autoid="_rp_3" aria-label="Message Contents" tabindex="0" aria-selected="true">
<div class="_rp_m5" tabindex="-1" aria-label="Expanded Message Contents">
<div tabindex="-1" autoid="_rp_u" class="_rp_Y4 ms-border-color-neutralLight ShowConsesusSchedulingLink ShowReferenceAttachmentsLinks" style="outline: none;">
<div class="_rp_b5 _rp_a5">
<div role="document">
<div autoid="_rp_x" class="_rp_05" id="Item.MessagePartBody">
<div class="_rp_15 ms-font-weight-regular ms-font-color-neutralDark rpHighlightAllClass rpHighlightBodyClass" id="Item.MessageUniqueBody" style="font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, serif, EmojiFont;">
<div class="rps_a4e">
<div dir="ltr">
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif, serif, EmojiFont;">
<p>Hello OISF-Users,</p>
<p><br>
</p>
<p>This post is a response from the OPNids team to the thread referenced in the subject line.</p>
<p><br>
</p>
<p>First, we would like to thank everyone and anyone on this list that has expressed an interest in OPNids and downloaded it to give it a try and experiment with the DragonFly Machine Learning Engine that is included in the OPNids install. They are separate
open source projects available at the links included at the bottom of the message.</p>
<p><br>
</p>
<p>The project would like to clear up what appears to be a misunderstanding. The DragonFly-MLE is included in the OPNids images that are currently available at the mirrors of the project. It does not however run in a container inside those images since they
are FreeBSD based living on top of the OPNsense ecosystem.</p>
<p><br>
</p>
<p>The MLE is not enabled by default, this must be done post install via the web gui. This is because the project had decided that the end user should enabled it if it is desired since you need to write/configure analyzers for it in order to get any value. The
first release of OPNids had a goal of enablement, meaning we wanted to enable the community to write analyzers and using the Dragonfly Machine Learning Engine on the system, perform machine learning activities in coordination with Suricata (also included in
OPNids).</p>
<p><br>
</p>
<p>We are planning a new release in the coming weeks (with many more provided image options beyond the 2 available today). There are a lot of updates coming. I hope you all will join us and provide constructive feedback and participation if you are so inclined.
We are still a new project, although much of what we are stands on the shoulders of the Suricata project and the OPNsense project to be sure. </p>
<p><br>
</p>
<p>Thanks for reading this long response. We hope it clears up some of the confusion.</p>
<p><br>
</p>
<p>The OPNids Project</p>
<p><br>
</p>
<p><a href="https://github.com/opnids" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" class="x_x_OWAAutoLink" id="LPlnk44809" previewremoved="true">https://github.com/opnids</a></p>
<div id="LPBorder_GT_15538033459890.5266084021751707" style="margin-bottom: 20px; overflow: auto; width: 759px;">
<table id="LPContainer_15538033459850.21346635204174214" role="presentation" cellspacing="0" style="width: 683px; overflow: auto; padding-top: 20px; padding-bottom: 20px; margin-top: 20px; border-top: 1px dotted rgb(200, 200, 200); border-bottom: 1px dotted rgb(200, 200, 200);">
<tbody>
<tr valign="top" style="border-spacing: 0px;">
<td id="x_x_ImageCell_15538033459860.880895836452227" colspan="1" style="width: 250px; padding-right: 20px;">
<div id="LPImageContainer_15538033459860.5383155787872034" style="height: 250px; margin: auto; display: table; width: 250px;">
<a href="https://github.com/opnids" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" id="LPImageAnchor_15538033459870.8244303144756944" style="display: table-cell; text-align: center;"><img id="LPThumbnailImageID_15538033459870.9997306639209413" width="250" height="250" style="display: inline-block; max-width: 250px; max-height: 250px; height: 250px; width: 250px; border-width: 0px; vertical-align: bottom;" src="https://avatars2.githubusercontent.com/u/37083840?s=280&v=4"></a></div>
</td>
<td id="x_x_TextCell_15538033459870.05340804220705442" colspan="2" style="vertical-align: top; padding: 0px; position: relative;">
<div id="LPRemovePreviewContainer_15538033459870.1717378253728421"></div>
<div id="LPTitle_15538033459870.8839833313747412" style="top: 0px; color: rgb(0, 120, 215); font-size: 21px; font-family: wf_segoe-ui_light, "Segoe UI Light", "Segoe WP Light", "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, serif, EmojiFont; line-height: 21px;">
<a href="https://github.com/opnids" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" id="LPUrlAnchor_15538033459880.4097241914577301" style="text-decoration-line: none;">OPNids · GitHub</a></div>
<div id="LPMetadata_15538033459880.06474108725807382" style="margin: 10px 0px 16px; color: rgb(102, 102, 102); font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, serif, EmojiFont; font-size: 14px; line-height: 14px;">
github.com</div>
<div id="LPDescription_15538033459890.8859782939511367" style="color: rgb(102, 102, 102); font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, serif, EmojiFont; font-size: 14px; line-height: 20px; max-height: 100px; overflow: hidden;">
OPNids has 8 repositories available. Follow their code on GitHub.</div>
</td>
</tr>
</tbody>
</table>
</div>
<br>
<p><a href="https://github.com/counterflow-ai/dragonfly-mle" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" class="x_x_OWAAutoLink" id="LPlnk507018" previewremoved="true">https://github.com/counterflow-ai/dragonfly-mle</a></p>
<div id="LPBorder_GT_15538033629900.29200806063215756" style="margin-bottom: 20px; overflow: auto; width: 759px;">
<table id="LPContainer_15538033629870.7709392022087442" role="presentation" cellspacing="0" style="width: 683px; overflow: auto; padding-top: 20px; padding-bottom: 20px; margin-top: 20px; border-top: 1px dotted rgb(200, 200, 200); border-bottom: 1px dotted rgb(200, 200, 200);">
<tbody>
<tr valign="top" style="border-spacing: 0px;">
<td id="x_x_ImageCell_15538033629880.16032462455866114" colspan="1" style="width: 250px; padding-right: 20px;">
<div id="LPImageContainer_15538033629880.8806058229972207" style="height: 250px; margin: auto; display: table; width: 250px;">
<a href="https://github.com/counterflow-ai/dragonfly-mle" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" id="LPImageAnchor_15538033629880.1708565819304726" style="display: table-cell; text-align: center;"><img id="LPThumbnailImageID_15538033629880.48502870973710666" width="250" height="250" style="display: inline-block; max-width: 250px; max-height: 250px; height: 250px; width: 250px; border-width: 0px; vertical-align: bottom;" src="https://avatars2.githubusercontent.com/u/33465431?s=400&v=4"></a></div>
</td>
<td id="x_x_TextCell_15538033629880.13809054568693258" colspan="2" style="vertical-align: top; padding: 0px; position: relative;">
<div id="LPRemovePreviewContainer_15538033629880.6858581234255028"></div>
<div id="LPTitle_15538033629880.9813876710577294" style="top: 0px; color: rgb(0, 120, 215); font-size: 21px; font-family: wf_segoe-ui_light, "Segoe UI Light", "Segoe WP Light", "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, serif, EmojiFont; line-height: 21px;">
<a href="https://github.com/counterflow-ai/dragonfly-mle" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" id="LPUrlAnchor_15538033629890.7975263113673372" style="text-decoration-line: none;">GitHub - counterflow-ai/dragonfly-mle: DragonFly:
Streaming Machine Learning Engine (MLE) for Network Threat Detection</a></div>
<div id="LPMetadata_15538033629890.8661636014774792" style="margin: 10px 0px 16px; color: rgb(102, 102, 102); font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, serif, EmojiFont; font-size: 14px; line-height: 14px;">
github.com</div>
<div id="LPDescription_15538033629900.6883455075461267" style="color: rgb(102, 102, 102); font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, serif, EmojiFont; font-size: 14px; line-height: 20px; max-height: 100px; overflow: hidden;">
QUICK START. Using Docker, this example assumes there is an instance of Suricata already installed and running on the host and it is logging to eve.json in directory /var/log/suricata/log.</div>
</td>
</tr>
</tbody>
</table>
</div>
<a href="https://opnids.io/" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" class="x_x_OWAAutoLink" id="LPlnk328686" previewremoved="true">https://opnids.io</a>
<div id="LPBorder_GT_15538035498090.7082216021151664" style="margin-bottom: 20px; overflow: auto; width: 759px;">
<table id="LPContainer_15538035498060.9126607138925464" role="presentation" cellspacing="0" style="width: 683px; overflow: auto; padding-top: 20px; padding-bottom: 20px; margin-top: 20px; border-top: 1px dotted rgb(200, 200, 200); border-bottom: 1px dotted rgb(200, 200, 200);">
<tbody>
<tr valign="top" style="border-spacing: 0px;">
<td id="x_x_ImageCell_15538035498070.9526585705492381" colspan="1" style="width: 250px; padding-right: 20px;">
<div id="LPImageContainer_15538035498070.8803788400942067" style="height: 63px; margin: auto; display: table; width: 250px;">
<a href="https://opnids.io/" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" id="LPImageAnchor_15538035498070.9036501598684195" style="display: table-cell; text-align: center;"><img id="LPThumbnailImageID_15538035498070.6291291300358668" width="250" height="63" style="display: inline-block; max-width: 250px; max-height: 250px; height: 63px; width: 250px; border-width: 0px; vertical-align: bottom;" src="http://static1.squarespace.com/static/5b1923fce749409db5a6677b/t/5b4f4ac6575d1ff83c30d1ed/1531923151055/opnids-logo-light-bg.png?format=1500w"></a></div>
</td>
<td id="x_x_TextCell_15538035498070.9054089344931873" colspan="2" style="vertical-align: top; padding: 0px; position: relative;">
<div id="LPRemovePreviewContainer_15538035498070.2539453542645542"></div>
<div id="LPTitle_15538035498070.3464119426868262" style="top: 0px; color: rgb(0, 120, 215); font-size: 21px; font-family: wf_segoe-ui_light, "Segoe UI Light", "Segoe WP Light", "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, serif, EmojiFont; line-height: 21px;">
<a href="https://opnids.io/" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" id="LPUrlAnchor_15538035498080.5734894925205518" style="text-decoration-line: none;">OPNids</a></div>
<div id="LPMetadata_15538035498080.6296130918498273" style="margin: 10px 0px 16px; color: rgb(102, 102, 102); font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, serif, EmojiFont; font-size: 14px; line-height: 14px;">
opnids.io</div>
<div id="LPDescription_15538035498090.4446388791214173" style="color: rgb(102, 102, 102); font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif, serif, EmojiFont; font-size: 14px; line-height: 20px; max-height: 100px; overflow: hidden;">
The first integration of Suricata IDS with a purpose-built Machine Learning Scripting Engine. A pathway forward for the Data Science Security Analyst to take advantage of today's mature and robust Suricata network detection engine while experimenting with machine
learning threat models -- all bundled in a free, open </div>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</div>
</div>
</div>
<span class="PersonaPaneLauncher">
<div ariatabindex="-1" class="_pe_d _pe_92" aria-expanded="false" tabindex="-1" aria-haspopup="false" style="width: 651px;">
</div>
</span></div>
<div class="_rp_65"></div>
</div>
</div>
</div>
</div>
</div>
<div class="_rp_k" tabindex="-1" style="width: 713px; height: 1px;">
<div class="_qc_F ms-bg-color-white _qc_G">
<hr class="_qc_B" style="width: 713px;">
<br>
<div tabindex="-1" class="_qc_y ms-border-color-neutralLight _qc_z">
<div class="_qc_A ms-border-color-neutralLight" style="width: 713px;"></div>
</div>
</div>
</div>
</div>
<br>
<p></p>
</div>
</body>
</html>