silk - SiLK: A network flow collection and analysis package
|Vendor:||CERT Network Situational Awareness <firstname.lastname@example.org>|
SiLK, the System for Internet-Level Knowledge, is a collection of traffic analysis tools developed by the CERT Network Situational Awareness Team (CERT NetSA) to facilitate security analysis of large networks. The SiLK tool suite supports the efficient collection, storage and analysis of network flow data, enabling network security analysts to rapidly query large historical traffic data sets. SiLK is ideally suited for analyzing traffic on the backbone or border of a large, distributed enterprise or mid-sized ISP. SiLK consists of two sets of tools: a packing system and analysis suite. The packing system receives network flow information from Netflow v5 or any IPFIX-based flowmeter and converts them into a more space efficient format, recording the packed records into service-specific, binary flat files. The analysis suite consists of tools which can read these flat files and then perform various query operations, ranging from per-record filtering to statistical analysis of groups of records. The analysis tools interoperate using pipes, allowing a user to develop a relatively sophisticated query from a simple beginning.
|silk-3.16.1-1.fc27.src [5.2 MiB]||
by Lawrence Rogers (2018-02-15):
* Release 3.16.1-1/2 rwstats Fix a bug that occurred when using a large amount of memory and could result in corrupted output. rwuniq Fix a bug that occurred when using a large amount of memory and could result in corrupted output. rwbagcat Fix bugs that occur when using the --network-structure switch with an IPv4-specific argument and bag file contains addresses in the ::ffff:0:0/96 netblock. rwsetcat Print an error message when rwsetcat is unable to read an IPset. rwsender, rwreceiver Fix an issue when using installations of GnuTLS that do not provide support for thread locking. rwflowpack, flowcap Fix a bug where NetFlow v9 records were being ignored because the application was decoding them with the wrong internal template. Building Fix issues when determining compilation flags necessary for Python support.
|silk-3.16.0-3.fc27.src [5.2 MiB]||
by Lawrence Rogers (2017-11-09):
* Release 3.16.0-3/4 Rebuilt with libfixbuf 1.8.0.