$ nmap -sV -T4 10.0.4.12/24
Starting Nmap 7.94 ( https://nmap.org ) at 2026-09-09 23:10 IST
Nmap scan report for gateway.soc.lan (10.0.4.1)
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 9.6p1 Ubuntu
443/tcp open ssl/http nginx 1.24.0
$ python3 train_gnn.py --model GraphSAGE --epochs 50 --batch 128
[INFO] Loading CICIDS-2019 graph dataset: 142,800 edges, 16 features
Epoch 01/50 | Loss: 0.3841 | Val Acc: 96.2% | F1-Score: 0.958
Epoch 25/50 | Loss: 0.0894 | Val Acc: 98.7% | F1-Score: 0.985
Epoch 50/50 | Loss: 0.0312 | Val Acc: 99.4% | F1-Score: 0.993 [OK]
$ sudo tcpdump -nn -i eth0 -c 4 'tcp[tcpflags] & (tcp-syn) != 0'
23:10:14.481920 IP 192.168.1.104.54120 > 10.0.4.1.443: Flags [S], seq 3829104
23:10:14.482015 IP 10.0.4.1.443 > 192.168.1.104.54120: Flags [S.], seq 9182301
4 packets captured, 4 packets received by filter, 0 packets dropped
$ curl -s -X GET https://api.soc-telemetry.local/health | jq .
{ "status": "healthy", "uptime_sec": 84219, "active_threat_rules": 1420 }
$ git log --oneline -4
8a4f21c feat: add GraphSAGE protocol-branched hetero layer
c3912da fix: prevent buffer overflow in packet parser daemon
7f8a920 refactor: optimize Dirichlet confidence scoring
10b981e init: baseline rule engine for syn flood classification
$ sudo iptables -L INPUT -v -n --line-numbers | head -n 4
num pkts bytes target prot opt in out source destination
1 1.4M 892M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
2 842K 420M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state ESTABLISHED
$ sha256sum weights/best_model.pt
d8b28f7a90c4e1b2394857210bc91a4572ef910a34b68e91240c5f187293a104 weights/best_model.pt
[VERIFIED] SHA-256 integrity check matches signature: 0x7F4A
$ tail -n 3 /var/log/auth.log
Sep 09 23:10:41 soc-node sshd[18420]: Accepted publickey for praveen from 10.0.4.5 port 52140 ssh2: ED25519
Sep 09 23:10:41 soc-node systemd-logind[912]: New session 42 of user praveen.
praveen@soc-node:~$ whoami
praveen
praveen@soc-node:~$ uptime
23:10:44 up 14 days, 6:21, 1 user, load average: 0.14, 0.08, 0.05
praveen@soc-node:~$
$ nmap -sV -T4 10.0.4.12/24
Starting Nmap 7.94 ( https://nmap.org ) at 2026-09-09 23:10 IST
Nmap scan report for gateway.soc.lan (10.0.4.1)
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 9.6p1 Ubuntu
443/tcp open ssl/http nginx 1.24.0
$ python3 train_gnn.py --model GraphSAGE --epochs 50 --batch 128
[INFO] Loading CICIDS-2019 graph dataset: 142,800 edges, 16 features
Epoch 01/50 | Loss: 0.3841 | Val Acc: 96.2% | F1-Score: 0.958
Epoch 25/50 | Loss: 0.0894 | Val Acc: 98.7% | F1-Score: 0.985
Epoch 50/50 | Loss: 0.0312 | Val Acc: 99.4% | F1-Score: 0.993 [OK]
$ sudo tcpdump -nn -i eth0 -c 4 'tcp[tcpflags] & (tcp-syn) != 0'
23:10:14.481920 IP 192.168.1.104.54120 > 10.0.4.1.443: Flags [S], seq 3829104
23:10:14.482015 IP 10.0.4.1.443 > 192.168.1.104.54120: Flags [S.], seq 9182301
4 packets captured, 4 packets received by filter, 0 packets dropped
$ curl -s -X GET https://api.soc-telemetry.local/health | jq .
{ "status": "healthy", "uptime_sec": 84219, "active_threat_rules": 1420 }
$ git log --oneline -4
8a4f21c feat: add GraphSAGE protocol-branched hetero layer
c3912da fix: prevent buffer overflow in packet parser daemon
7f8a920 refactor: optimize Dirichlet confidence scoring
10b981e init: baseline rule engine for syn flood classification
$ sudo iptables -L INPUT -v -n --line-numbers | head -n 4
num pkts bytes target prot opt in out source destination
1 1.4M 892M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
2 842K 420M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state ESTABLISHED
$ sha256sum weights/best_model.pt
d8b28f7a90c4e1b2394857210bc91a4572ef910a34b68e91240c5f187293a104 weights/best_model.pt
[VERIFIED] SHA-256 integrity check matches signature: 0x7F4A
$ tail -n 3 /var/log/auth.log
Sep 09 23:10:41 soc-node sshd[18420]: Accepted publickey for praveen from 10.0.4.5 port 52140 ssh2: ED25519
Sep 09 23:10:41 soc-node systemd-logind[912]: New session 42 of user praveen.
praveen@soc-node:~$ whoami
praveen
praveen@soc-node:~$ uptime
23:10:44 up 14 days, 6:21, 1 user, load average: 0.14, 0.08, 0.05
praveen@soc-node:~$
