silk-rwflowappend - SiLK Toolset: Remote Data Storage Appending Daemon
|Vendor:||CERT Network Situational Awareness <email@example.com>|
SiLK, the System for Internet-Level Knowledge, is a collection of traffic analysis tools developed by the CERT Network Situational Awareness Team (CERT NetSA) to facilitate security analysis of large networks. The SiLK tool suite supports the efficient collection, storage and analysis of network flow data, enabling network security analysts to rapidly query large historical traffic data sets. SiLK is ideally suited for analyzing traffic on the backbone or border of a large, distributed enterprise or mid-sized ISP. The silk-rwflowappend package is used when the final storage location of SiLK data files is on a different machine than that where the files are created by the rwflowpack daemon (see the silk-rwflowpack package). rwflowappend watches a directory for SiLK data files and appends those files to the final storage location where the SiLK analysis tools (from the silk-analysis package) can process them. To move the files from rwflowpack to rwflowappend, an rwsender-rwreceiver pair is typically used.
|silk-rwflowappend-3.7.1-1.fc15.i686 [37 KiB]||
by Lawrence Rogers (2013-05-30):
* Release 3.7.1-1 rwpmaplookup enhancement Add --ipset-files switch that supports using IPsets to query prefix maps. rwdedupe bug fix Fix a crash that would occur when using --xargs with an empty list of files. rwsort bug fix Create a valid SiLK Flow file when using --xargs with an empty list of files. rwcut bug fix Print the title line when using --xargs with an empty list of files. rwrecgenerator bug fix Fix a bug when using --sensor-prefix-map that would set either the source or destination address to a random value. Building Fix a small issue in the silk.spec file when the dist RPM macro was not defined.
|silk-rwflowappend-2.4.7-2.fc15.i386 [31 KiB]||
by Lawrence Rogers (2012-03-29):
* Release 2.4.7-2 Now uses adns