Download Now
The Analysis Pipeline is designed to run as a daemon as part
of the
SiLK collection and packing
process, where it inspects every SiLK Flow record as the records
are created. The Analysis Pipeline supports several analyses,
including watch list alerting, beacon detection, passive FTP
detection, and IPv6 tunnel detection. The textual output from the
Analysis Pipeline can be fed to a security information and event
manager (SIEM).
Download Now
The fixbuf library provides a set of functions for processing the
IPFIX protocol message format. Using fixbuf, developers can build
IPFIX Collecting and Exporting Processes.
Download Now
IP Association (IPA) is a suite of tools and libraries which aims
to provide a flexible repository of IP address data and metadata.
Download Now
iSiLK is a graphical front-end for the SiLK tools, designed to
work with an existing installation of the SiLK analysis suite. The
application uses the SSH protocol to connect to an analysis
server, run SiLK command-line tools and copy data files. It
provides an easy-to-use alternative interface to the core
functionality of the SiLK tool suite.
Download Now
The netsa-python library is a grab-bag of Python routines and
frameworks that we have found helpful when developing analyses
using the SiLK toolkit.
Download Now
Rayon is a Python library and set of tools for generating basic
two-dimensional statistical visualization. Rayon can be used in
automate reporting; provide command-line, GUI or web applications;
or do ad-hoc exploratory data analysis.
Download Now
The System for Internet Level Knowledge (SiLK) is an efficient
network flow collection and storage infrastructure that will
accept flow data from a variety of sensors. SiLK also provides a
suite of efficient command-line tools for analysis.
Download Now
Yet Another Flow Sensor (YAF) processes packet data into
bidirectional flow records that can be used as input to an IPFIX
Collecting Process. YAF's output can be used with the NetSA
Aggregated Flow (NAF) toolchain and the SiLK tools.
