#2768 - Fixed issue causing main port to not be included in list of open ports. documented the configuration of listen_on_ports. added test that tests listen_on_ports configuration from yaml.
This commit is contained in:
11
CHANGELOG.md
11
CHANGELOG.md
@@ -9,9 +9,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|||||||
### Added
|
### Added
|
||||||
- Random Number Generator Seeding by specifying a random number seed in the config file.
|
- Random Number Generator Seeding by specifying a random number seed in the config file.
|
||||||
- Implemented Terminal service class, providing a generic terminal simulation.
|
- Implemented Terminal service class, providing a generic terminal simulation.
|
||||||
|
- Added `User`, `UserManager` and `UserSessionManager` to enable the creation of user accounts and login on Nodes.
|
||||||
|
- Added a `listen_on_ports` set in the `IOSoftware` class to enable software listening on ports in addition to the
|
||||||
|
main port they're assigned.
|
||||||
|
|
||||||
### Changed
|
### Changed
|
||||||
- Removed the install/uninstall methods in the node class and made the software manager install/uninstall handle all of their functionality.
|
- Updated `SoftwareManager` `install` and `uninstall` to handle all functionality that was being done at the `install`
|
||||||
|
and `uninstall` methods in the `Node` class.
|
||||||
|
- Updated the `receive_payload_from_session_manager` method in `SoftwareManager` so that it now sends a copy of the
|
||||||
|
payload to any software listening on the destination port of the `Frame`.
|
||||||
|
|
||||||
|
### Removed
|
||||||
|
- Removed the `install` and `uninstall` methods in the `Node` class.
|
||||||
|
|
||||||
|
|
||||||
## [3.2.0] - 2024-07-18
|
## [3.2.0] - 2024-07-18
|
||||||
|
|||||||
@@ -25,3 +25,35 @@ The configuration options are the attributes that fall under the options for an
|
|||||||
Optional. Default value is ``2``.
|
Optional. Default value is ``2``.
|
||||||
|
|
||||||
The number of timesteps the |SOFTWARE_NAME| will remain in a ``FIXING`` state before going into a ``GOOD`` state.
|
The number of timesteps the |SOFTWARE_NAME| will remain in a ``FIXING`` state before going into a ``GOOD`` state.
|
||||||
|
|
||||||
|
|
||||||
|
``listen_on_ports``
|
||||||
|
"""""""""""""""""""
|
||||||
|
|
||||||
|
The set of ports to listen on. This is in addition to the main port the software is designated. This set can either be
|
||||||
|
the string name of ports or the port integers
|
||||||
|
|
||||||
|
Example:
|
||||||
|
|
||||||
|
.. code-block:: yaml
|
||||||
|
|
||||||
|
simulation:
|
||||||
|
network:
|
||||||
|
nodes:
|
||||||
|
- hostname: client
|
||||||
|
type: computer
|
||||||
|
ip_address: 192.168.10.11
|
||||||
|
subnet_mask: 255.255.255.0
|
||||||
|
default_gateway: 192.168.10.1
|
||||||
|
services:
|
||||||
|
- type: DatabaseService
|
||||||
|
options:
|
||||||
|
backup_server_ip: 10.10.1.12
|
||||||
|
listen_on_ports:
|
||||||
|
- 631
|
||||||
|
applications:
|
||||||
|
- type: WebBrowser
|
||||||
|
options:
|
||||||
|
target_url: http://sometech.ai
|
||||||
|
listen_on_ports:
|
||||||
|
- SMB
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
# © Crown-owned copyright 2024, Defence Science and Technology Laboratory UK
|
# © Crown-owned copyright 2024, Defence Science and Technology Laboratory UK
|
||||||
"""PrimAITE game - Encapsulates the simulation and agents."""
|
"""PrimAITE game - Encapsulates the simulation and agents."""
|
||||||
from ipaddress import IPv4Address
|
from ipaddress import IPv4Address
|
||||||
from typing import Dict, List, Optional
|
from typing import Dict, List, Optional, Union
|
||||||
|
|
||||||
import numpy as np
|
import numpy as np
|
||||||
from pydantic import BaseModel, ConfigDict
|
from pydantic import BaseModel, ConfigDict
|
||||||
@@ -44,8 +44,10 @@ from primaite.simulator.system.services.ftp.ftp_client import FTPClient
|
|||||||
from primaite.simulator.system.services.ftp.ftp_server import FTPServer
|
from primaite.simulator.system.services.ftp.ftp_server import FTPServer
|
||||||
from primaite.simulator.system.services.ntp.ntp_client import NTPClient
|
from primaite.simulator.system.services.ntp.ntp_client import NTPClient
|
||||||
from primaite.simulator.system.services.ntp.ntp_server import NTPServer
|
from primaite.simulator.system.services.ntp.ntp_server import NTPServer
|
||||||
|
from primaite.simulator.system.services.service import Service
|
||||||
from primaite.simulator.system.services.terminal.terminal import Terminal
|
from primaite.simulator.system.services.terminal.terminal import Terminal
|
||||||
from primaite.simulator.system.services.web_server.web_server import WebServer
|
from primaite.simulator.system.services.web_server.web_server import WebServer
|
||||||
|
from primaite.simulator.system.software import Software
|
||||||
|
|
||||||
_LOGGER = getLogger(__name__)
|
_LOGGER = getLogger(__name__)
|
||||||
|
|
||||||
@@ -328,6 +330,21 @@ class PrimaiteGame:
|
|||||||
user_manager: UserManager = new_node.software_manager.software["UserManager"] # noqa
|
user_manager: UserManager = new_node.software_manager.software["UserManager"] # noqa
|
||||||
for user_cfg in node_cfg["users"]:
|
for user_cfg in node_cfg["users"]:
|
||||||
user_manager.add_user(**user_cfg, bypass_can_perform_action=True)
|
user_manager.add_user(**user_cfg, bypass_can_perform_action=True)
|
||||||
|
|
||||||
|
def _set_software_listen_on_ports(software: Union[Software, Service], software_cfg: Dict):
|
||||||
|
"""Set listener ports on software."""
|
||||||
|
listen_on_ports = []
|
||||||
|
for port_id in set(software_cfg.get("options", {}).get("listen_on_ports", [])):
|
||||||
|
print("yes", port_id)
|
||||||
|
port = None
|
||||||
|
if isinstance(port_id, int):
|
||||||
|
port = Port(port_id)
|
||||||
|
elif isinstance(port_id, str):
|
||||||
|
port = Port[port_id]
|
||||||
|
if port:
|
||||||
|
listen_on_ports.append(port)
|
||||||
|
software.listen_on_ports = set(listen_on_ports)
|
||||||
|
|
||||||
if "services" in node_cfg:
|
if "services" in node_cfg:
|
||||||
for service_cfg in node_cfg["services"]:
|
for service_cfg in node_cfg["services"]:
|
||||||
new_service = None
|
new_service = None
|
||||||
@@ -341,6 +358,7 @@ class PrimaiteGame:
|
|||||||
if "fix_duration" in service_cfg.get("options", {}):
|
if "fix_duration" in service_cfg.get("options", {}):
|
||||||
new_service.fixing_duration = service_cfg["options"]["fix_duration"]
|
new_service.fixing_duration = service_cfg["options"]["fix_duration"]
|
||||||
|
|
||||||
|
_set_software_listen_on_ports(new_service, service_cfg)
|
||||||
# start the service
|
# start the service
|
||||||
new_service.start()
|
new_service.start()
|
||||||
else:
|
else:
|
||||||
@@ -390,6 +408,8 @@ class PrimaiteGame:
|
|||||||
_LOGGER.error(msg)
|
_LOGGER.error(msg)
|
||||||
raise ValueError(msg)
|
raise ValueError(msg)
|
||||||
|
|
||||||
|
_set_software_listen_on_ports(new_application, application_cfg)
|
||||||
|
|
||||||
# run the application
|
# run the application
|
||||||
new_application.run()
|
new_application.run()
|
||||||
|
|
||||||
|
|||||||
@@ -237,19 +237,24 @@ class SoftwareManager:
|
|||||||
self.software.get("NMAP").receive(payload=payload, session_id=session_id)
|
self.software.get("NMAP").receive(payload=payload, session_id=session_id)
|
||||||
return
|
return
|
||||||
main_receiver = self.port_protocol_mapping.get((port, protocol), None)
|
main_receiver = self.port_protocol_mapping.get((port, protocol), None)
|
||||||
listening_receivers = [software for software in self.software.values() if port in software.listen_on_ports]
|
if main_receiver:
|
||||||
receivers = [main_receiver] + listening_receivers if main_receiver else listening_receivers
|
main_receiver.receive(
|
||||||
if receivers:
|
payload=payload, session_id=session_id, from_network_interface=from_network_interface, frame=frame
|
||||||
for receiver in receivers:
|
)
|
||||||
receiver.receive(
|
listening_receivers = [
|
||||||
payload=deepcopy(payload),
|
software
|
||||||
session_id=session_id,
|
for software in self.software.values()
|
||||||
from_network_interface=from_network_interface,
|
if port in software.listen_on_ports and software != main_receiver
|
||||||
frame=frame,
|
]
|
||||||
)
|
for receiver in listening_receivers:
|
||||||
else:
|
receiver.receive(
|
||||||
|
payload=deepcopy(payload),
|
||||||
|
session_id=session_id,
|
||||||
|
from_network_interface=from_network_interface,
|
||||||
|
frame=frame,
|
||||||
|
)
|
||||||
|
if not main_receiver and not listening_receivers:
|
||||||
self.sys_log.warning(f"No service or application found for port {port} and protocol {protocol}")
|
self.sys_log.warning(f"No service or application found for port {port} and protocol {protocol}")
|
||||||
pass
|
|
||||||
|
|
||||||
def show(self, markdown: bool = False):
|
def show(self, markdown: bool = False):
|
||||||
"""
|
"""
|
||||||
|
|||||||
@@ -0,0 +1,39 @@
|
|||||||
|
io_settings:
|
||||||
|
save_step_metadata: false
|
||||||
|
save_pcap_logs: true
|
||||||
|
save_sys_logs: true
|
||||||
|
sys_log_level: WARNING
|
||||||
|
agent_log_level: INFO
|
||||||
|
save_agent_logs: true
|
||||||
|
write_agent_log_to_terminal: True
|
||||||
|
|
||||||
|
|
||||||
|
game:
|
||||||
|
max_episode_length: 256
|
||||||
|
ports:
|
||||||
|
- ARP
|
||||||
|
protocols:
|
||||||
|
- ICMP
|
||||||
|
- UDP
|
||||||
|
|
||||||
|
|
||||||
|
simulation:
|
||||||
|
network:
|
||||||
|
nodes:
|
||||||
|
- hostname: client
|
||||||
|
type: computer
|
||||||
|
ip_address: 192.168.10.11
|
||||||
|
subnet_mask: 255.255.255.0
|
||||||
|
default_gateway: 192.168.10.1
|
||||||
|
services:
|
||||||
|
- type: DatabaseService
|
||||||
|
options:
|
||||||
|
backup_server_ip: 10.10.1.12
|
||||||
|
listen_on_ports:
|
||||||
|
- 631
|
||||||
|
applications:
|
||||||
|
- type: WebBrowser
|
||||||
|
options:
|
||||||
|
target_url: http://sometech.ai
|
||||||
|
listen_on_ports:
|
||||||
|
- SMB
|
||||||
@@ -1,13 +1,17 @@
|
|||||||
# © Crown-owned copyright 2024, Defence Science and Technology Laboratory UK
|
# © Crown-owned copyright 2024, Defence Science and Technology Laboratory UK
|
||||||
from typing import Any, Dict, List, Set
|
from typing import Any, Dict, List, Set
|
||||||
|
|
||||||
|
import yaml
|
||||||
from pydantic import Field
|
from pydantic import Field
|
||||||
|
|
||||||
|
from primaite.game.game import PrimaiteGame
|
||||||
|
from primaite.simulator.network.hardware.nodes.host.computer import Computer
|
||||||
from primaite.simulator.network.transmission.network_layer import IPProtocol
|
from primaite.simulator.network.transmission.network_layer import IPProtocol
|
||||||
from primaite.simulator.network.transmission.transport_layer import Port
|
from primaite.simulator.network.transmission.transport_layer import Port
|
||||||
from primaite.simulator.system.applications.database_client import DatabaseClient
|
from primaite.simulator.system.applications.database_client import DatabaseClient
|
||||||
from primaite.simulator.system.services.database.database_service import DatabaseService
|
from primaite.simulator.system.services.database.database_service import DatabaseService
|
||||||
from primaite.simulator.system.services.service import Service
|
from primaite.simulator.system.services.service import Service
|
||||||
|
from tests import TEST_ASSETS_ROOT
|
||||||
|
|
||||||
|
|
||||||
class _DatabaseListener(Service):
|
class _DatabaseListener(Service):
|
||||||
@@ -62,3 +66,19 @@ def test_http_listener(client_server):
|
|||||||
assert db_connection.query("SELECT")
|
assert db_connection.query("SELECT")
|
||||||
|
|
||||||
assert len(server_db_listener.payloads_received) == 3
|
assert len(server_db_listener.payloads_received) == 3
|
||||||
|
|
||||||
|
|
||||||
|
def test_set_listen_on_ports_from_config():
|
||||||
|
config_path = TEST_ASSETS_ROOT / "configs" / "basic_node_with_software_listening_ports.yaml"
|
||||||
|
|
||||||
|
with open(config_path, "r") as f:
|
||||||
|
config_dict = yaml.safe_load(f)
|
||||||
|
network = PrimaiteGame.from_config(cfg=config_dict).simulation.network
|
||||||
|
|
||||||
|
client: Computer = network.get_node_by_hostname("client")
|
||||||
|
assert Port.SMB in client.software_manager.get_open_ports()
|
||||||
|
assert Port.IPP in client.software_manager.get_open_ports()
|
||||||
|
|
||||||
|
web_browser = client.software_manager.software["WebBrowser"]
|
||||||
|
|
||||||
|
assert not web_browser.listen_on_ports.difference({Port.SMB, Port.IPP})
|
||||||
|
|||||||
Reference in New Issue
Block a user