PACKETS
./packets --reglas
[ OK ] flow features only: bytes, timings and frequencies. Never packet contents.
[ OK ] you decide on the flow in focus: one big card, always in the same spot. The ones waiting stack up on the left. Keys ← normal and → anomaly.
[ !! ] if the queue goes past 6 flows, the buffer drops the one you were reading and you lose a life.
[ ?? ] a run is 30 flows. There is no scoreboard at the end: there is a confusion matrix, precision, recall and F1 for your run.
lives
level 1/3
score 0
streak ×1
← normal · → anomaly · space: pause
queue 0/30
run report
The flows are synthetic and generated in your browser. The classifier is a hand-written heuristic, not NAM's Random Forest: that one was trained on a dataset that does not travel with the repository, so these numbers are not the final project's. Nothing leaves your machine and there is no telemetry: the record is kept in this browser only.
Where the idea comes from: NAM