yaf - Yet Another Flow sensor
YAF is Yet Another Flow sensor. It processes packet data from pcap(3) dumpfiles as generated by tcpdump(1) or via live capture from an interface using pcap(3) or an Endace DAG card into bidirectional flows, then exports those flows to IPFIX Collecting Processes or in an IPFIX-based file format. YAF's output can be used with the NetSA Aggregated Flow (NAF) toolchain.
|yaf-2.11.2-1.el6.x86_64 [1.1 MiB]||
by Lawrence R. Rogers (2020-11-20):
* Release 2.11.2-1 Fixed bugs in NTP and DNS deep packet inspection. Fixed a compilation error when building with metadata export enabled. Fixed possible compilation errors when building with nDPI support. Fixed compilation errors when building with newer versions of PF_Ring.