applications/system

super_mediator - IPFIX Super Mediator for use with the YAF and SiLK tools

Website: http://tools.netsa.cert.org/super_mediator/
License: GPLv2
Description:
super_mediator is an IPFIX mediator for use with the YAF and SiLK tools.
It collects and filters YAF output data to various IPFIX collecting processes
and/or csv files. super_mediator can be configured to perform de-duplication
of DNS resource records, SSL certificates, or HTTP header fields as exported
by YAF.

Packages

super_mediator-1.8.0-1.fc31.x86_64 [235 KiB] Changelog by Lawrence R. Rogers (2020-12-22):
* Release 1.8.0-1
	Added a new switch, --rewrite-ssl-certs, which restructures the template used for TLS/SSL certificates for IPFIX exporters. The template uses specific IEs for some fields in an SSL certificate.
		The --rewrite-ssl-certs switch also allows a super_mediator to read the new SSL template from an upstream super_mediator. Deduplication of the rewritten certificates is not supported.
	Added the ability to read the new SMTP DPI records exported by YAF 2.12.0.
	Added the observation domain ID to JSON output.

Listing created by Repoview-0.6.6-4.el7