Jump to letter: [
2ABCDEFGHJKLMNPQRSTUVWXYZ
]
super_mediator - IPFIX Super Mediator for use with the YAF and SiLK tools
- Description:
super_mediator is an IPFIX mediator for use with the YAF and SiLK tools.
It collects and filters YAF output data to various IPFIX collecting processes
and/or csv files. super_mediator can be configured to perform de-duplication
of DNS resource records, SSL certificates, or HTTP header fields as exported
by YAF.
Packages
super_mediator-1.8.0-1.fc31.x86_64
[235 KiB] |
Changelog
by Lawrence R. Rogers (2020-12-22):
* Release 1.8.0-1
Added a new switch, --rewrite-ssl-certs, which restructures the template used for TLS/SSL certificates for IPFIX exporters. The template uses specific IEs for some fields in an SSL certificate.
The --rewrite-ssl-certs switch also allows a super_mediator to read the new SSL template from an upstream super_mediator. Deduplication of the rewritten certificates is not supported.
Added the ability to read the new SMTP DPI records exported by YAF 2.12.0.
Added the observation domain ID to JSON output.
|