RPMs and Yum Repository

We provide selected releases of our tools as RPM packages, both via a Yum repository and as direct downloads. We currently build for the following distributions:

  • Red Hat Enterprise Linux 10 (and compatible) (since May 2026)
  • Red Hat Enterprise Linux 9 (and compatible)
  • Red Hat Enterprise Linux 8 (and compatible)

Prior to July 2026, packages were built only for x86_64. Starting in July 2026, aarch64 packages built on Rocky Linux are also available for el8, el9, and el10.

Yum Repository

The easiest way to use the NetSA Tools Yum repository is to install the appropriate repository RPM: 

# Install the repository RPM for RHEL8:
sudo dnf install -y \
  https://tools.netsa.cert.org/yum/reporpms/netsa-tools-repo-2026.3-1.el8.noarch.rpm

# Install the repository RPM for RHEL9:
sudo dnf install -y \
  https://tools.netsa.cert.org/yum/reporpms/netsa-tools-repo-2026.3-1.el9.noarch.rpm

# Install the repository RPM for RHEL10:
sudo dnf install -y \
  https://tools.netsa.cert.org/yum/reporpms/netsa-tools-repo-2026.3-1.el10.noarch.rpm

Installing these repository RPMs will add the NetSA GPG signing key to your system, and the NetSA Tools Yum repository to your Yum repos. You can then install individual packages like: 

# Install fixbuf IFPIX tools, SiLK analysis tools, rwflowpack, and YAF:
sudo dnf install -y fixbuf-tools silk-analysis silk-rwflowpack yaf

Direct RPM download

If you can't use the yum-based installation method or would prefer not to use it, you may access all of the RPMs directly from the Yum repository.

Configuration Details

We build RPM packages for the following software packages, with some default configuration:

  • fixbuf-tools since 4.0.1
    (RHEL10 and ARM since 4.0.4)
  • libfixbuf since 2.5.1 (with OpenSSL support enabled)
    (RHEL10 and ARM since 2.5.4)
  • SiLK since 3.23.2 (with IPv6, GnuTLS, fixbuf, PySiLK, Snappy support enabled)
    (and MaxMind support enabled since 3.23.4)
    (RHEL10 and ARM since 3.24.2)
  • super_mediator since 1.11.2 (with SiLK support enabled)
    (RHEL10 since 1.13.2, ARM since 1.13.3)
  • YAF since 2.16.2 (with applabel, plugins, OpenSSL, and zlib support enabled)
    (RHEL10 since 2.17.6, ARM since 2.19.4)