CERT/CC
background
background
CERT NetSA Security Suite 
Open Source Tools for Network Monitoring 
News | Documentation | Downloads
YAF 0.8.1 | NAF 0.6.0 | SiLK 1.0.1 | RAVE 1.9.9
fixbuf 0.7.3 | ipa 0.2.1 | airdbc 0.2.2 | airframe 0.7.2 | Portal 0.8.0
NAF - Documentation
Documentation | Downloads

Manuals

The tools are documented by their man pages; see nafalize(1), nafilter(1), nafscii(1), and nafload(1) for details.

Building

NAF requires glib 2.6.4 or later (2.8.x is OK). Build and install glib before building NAF. Note that glib is also included in many operating environments or ports collections.

NAF requires libairframe 0.6.6 or later. Build and install libairframe before building NAF.

NAF requires libfixbuf 0.6.0 or later. Build and install libfixbuf before building NAF.

nafload requires AirDBC version 0.2.0 or later. Build and install AirDBC before building NAF if nafload support is required. Use the --with-airdbc option to ./configure to enable nafload support.

nafalize SiLK input support requires SiLK 0.11.0 or later. Build and install the SiLK analysis tools before building NAF if nafalize SiLK input support is required. Use the --with-silk option to ./configure to enable SiLK input support.

The NAF applications also require the included libnaf library, which implements NAF file I/O and core flow data structures common to all applications. libnaf is included and installed with the distribution.

NAF uses a reasonably standard autotools-based build system. The customary build procedure (./configure && make && make install) should work in most environments. Note that NAF finds libfixbuf, libairframe, and libairdbc using the pkg-config facility, so you may have to set the PKG_CONFIG_PATH variable on the configure command line if these libraries are installed in a nonstandard location, other than the prefix to which you are installing NAF itself.

Known Issues

In general, NAF is beta quality software. Not every reasonable combination of input and configuration has been tested. Be aware of this before using NAF in production environments.