Live DVD

The NetSA Live DVD is a Fedora 22 (64-bit) respin, and contains the following tools from the CERT NetSA Security Suite:

• Analysis Pipeline 4.4.1
• fixbuf 1.7.1
• netsa-python 1.4.3
• Rayon 1.4.3
• SiLK 3.11.0.1
• super_mediator 1.1.2
• YAF 2.7.1

In order to create a Bootable USB or DVD from the NetSA Live DVD, please see the official documentation from Fedora.

The NetSA tools were installed through the use of the (now shuttered) CERT Linux Incident Response and Forensics Tools Repository at forensics.cert.org.

Additional software useful when performing network analysis is also installed. This includes:

• Python 2.7.10
• Ncat 7.0.0
• R 3.2.2
• tcpdump 4.7.4
• Wireshark 1.12.8
• MariaDB 10.0.21

The software contained on the DVD can be updated to the latest versions in the repositories through the following command:

    dnf update

Information about using DNF can be found on the official github page, or by issuing:

    man dnf

The DVD also contains a set of reference data located in /data/. By default, the SiLK analysis tools are configured to make use of the /data/ repository.