# packages

pkgId: 84eb132ab43a80fc389b83b550f4c4e0b68b1832f317df3bd9ca4b1ec832775b
name: fixbuf-tools
arch: x86_64
version: 4.0.1
epoch: 0
release: 1.el8
summary: Command line tools to convert IPFIX files to JSON or text
url: https://tools.netsa.cert.org/fixbuf-tools/
rpm_license: GPLv2
rpm_group: Applications/System
rpm_buildhost: 734f6aa5979b
rpm_sourcerpm: fixbuf-tools-4.0.1-1.el8.src.rpm
location_href: x86_64/fixbuf-tools-4.0.1-1.el8.x86_64.rpm
checksum_type: sha256
description:
  fixbuf-tools contains two command-line tools for processing IPFIX files:
  ipfix2json reads an IPFIX file and produces JSON; ipfixDump creates a
  human-readable representation of the contents of an IPFIX file.


pkgId: a9ded14dc9c8e0a4f881ece3ce1edbf6212f907c983bb462feb72ab4a02658e8
name: libfixbuf
arch: x86_64
version: 2.5.1
epoch: 0
release: 1_openssl.el8
summary: Fixbuf IPFIX implementation library
url: https://tools.netsa.cert.org/fixbuf2/
rpm_license: LGPLv3
rpm_group: Applications/System
rpm_buildhost: 0e090dccb4f6
rpm_sourcerpm: libfixbuf-2.5.1-1_openssl.el8.src.rpm
location_href: x86_64/libfixbuf-2.5.1-1_openssl.el8.x86_64.rpm
checksum_type: sha256
description:
  libfixbuf aims to be a compliant implementation of the IPFIX Protocol
  and message format, from which IPFIX Collecting Processes and
  IPFIX Exporting Processes may be built.


pkgId: e3f4d4b6c92637d32128ca007b1c9efd502c9fc5e4abf2450f94e0261b049ee6
name: libfixbuf-devel
arch: x86_64
version: 2.5.1
epoch: 0
release: 1_openssl.el8
summary: Unversioned shared libraries and C header files for libfixbuf
url: https://tools.netsa.cert.org/fixbuf2/
rpm_license: LGPLv3
rpm_group: Applications/System
rpm_buildhost: 0e090dccb4f6
rpm_sourcerpm: libfixbuf-2.5.1-1_openssl.el8.src.rpm
location_href: x86_64/libfixbuf-devel-2.5.1-1_openssl.el8.x86_64.rpm
checksum_type: sha256
description:
  Unversioned shared libraries and C header files for libfixbuf. Also includes
  HTML documentation of the library API calls.


pkgId: ec2fc3caac3fc54419fa77fd921ddff2ab74b794f46268815352a37078646281
name: silk-analysis
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el8
summary: SiLK Toolset: The Analysis Suite
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: b56baf156abe
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el8.src.rpm
location_href: x86_64/silk-analysis-3.23.2-1_pysilk_snappy.el8.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-analysis package contains the analysis tools that query the
  SiLK Flow data collected by rwflowpack (contained in the
  silk-rwflowpack package) and summarize that data in various ways.


pkgId: 924767a41ba2a43118bb2385b5a0d9b8f7136e1691f0f305c183565432666ce2
name: silk-common
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el8
summary: SiLK Toolset: Common Libraries and Configuration Files
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: b56baf156abe
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el8.src.rpm
location_href: x86_64/silk-common-3.23.2-1_pysilk_snappy.el8.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-common package contains the libraries and configuration files
  required by the other parts of SiLK Toolset, as well as generally
  useful utilities.


pkgId: bc91c9be32e963e4fb21e60a8873c0fcc49aee0e145e0780feae98284cd57554
name: silk-devel
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el8
summary: The SiLK Toolset development files
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Development/Libraries
rpm_buildhost: b56baf156abe
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el8.src.rpm
location_href: x86_64/silk-devel-3.23.2-1_pysilk_snappy.el8.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-devel package contains the development libraries and headers
  for SiLK.  This package is required to build additional applications
  or to build shared libraries for use as plug-ins to the SiLK analysis
  tools.


pkgId: 09c0e1a5f1141c32c714227e9166ae80cede05392bb9251e4a803e982735aa4e
name: silk-flowcap
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el8
summary: SiLK Toolset: Remote Flow Collection
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: b56baf156abe
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el8.src.rpm
location_href: x86_64/silk-flowcap-3.23.2-1_pysilk_snappy.el8.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-flowcap package contains flowcap, a daemon to capture NetFlow
  v5 or IPFIX flows (Internet Protocol Flow Information eXport), to
  store the data temporarily in files on its local disk, and to forward
  these files over the network to a machine where rwflowpack processes
  the data.  flowcap is typically used with an rwsender-rwreceiver pair
  to move the files across the network.


pkgId: e53fbc75364e6d551ba4ac53881f0e14c654295c4205347225b4a69d64528b05
name: silk-rwflowappend
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el8
summary: SiLK Toolset: Remote Data Storage Appending Daemon
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: b56baf156abe
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el8.src.rpm
location_href: x86_64/silk-rwflowappend-3.23.2-1_pysilk_snappy.el8.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-rwflowappend package is used when the final storage location
  of SiLK data files is on a different machine than that where the files
  are created by the rwflowpack daemon (see the silk-rwflowpack
  package).  rwflowappend watches a directory for SiLK data files and
  appends those files to the final storage location where the SiLK
  analysis tools (from the silk-analysis package) can process them.  To
  move the files from rwflowpack to rwflowappend, an rwsender-rwreceiver
  pair is typically used.


pkgId: d05494663631eade88b91c7d536ddd478fae0447afd2b33514456d94b76fd45b
name: silk-rwflowpack
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el8
summary: SiLK Toolset: The Packer
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: b56baf156abe
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el8.src.rpm
location_href: x86_64/silk-rwflowpack-3.23.2-1_pysilk_snappy.el8.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-rwflowpack package converts NetFlow v5 or IPFIX (Internet
  Protocol Flow Information eXport) data to the SiLK Flow record format,
  categorizes each flow (e.g., as incoming or outgoing), and stores the
  data in binary flat files within a directory tree, with one file per
  hour-category-sensor tuple.  Use the tools from the silk-analysis
  package to query this data.  rwflowpack may capture the data itself,
  or it may process files that have been created by flowcap (see the
  silk-flowcap package).


pkgId: 505545fd4f927ffb1275ed9ad38dc73bd1c52cf71641bba5ac893ad7330deee9
name: silk-rwpollexec
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el8
summary: SiLK Toolset: Batch Command Executor
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: b56baf156abe
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el8.src.rpm
location_href: x86_64/silk-rwpollexec-3.23.2-1_pysilk_snappy.el8.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-rwpollexec package contains a program (rwpollexec) which
  monitors a directory for incoming files.  For each file, rwpollexec
  executes a user-specified command.  If the command completes
  successfully, the file is either moved to an archive directory or
  deleted.


pkgId: 79a51178530f9eac7f72b07bbdb451551820b70fe5d5f848fd5bd18296ddadc7
name: silk-rwreceiver
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el8
summary: SiLK Toolset: File Transfer Receiver
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: b56baf156abe
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el8.src.rpm
location_href: x86_64/silk-rwreceiver-3.23.2-1_pysilk_snappy.el8.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-rwreceiver package contains a program (rwreceiver) which
  receives files over the network from one or more rwsender programs.
  rwsender-rwreceiver pairs are used to move files from a machine
  running flowcap and one running rwflowpack, or from the rwflowpack
  machine to machine(s) running rwflowappend.


pkgId: 3fa0d4ca33bfde909b18a74623f43fa00beba87cb951294f5b53ecfaf486e298
name: silk-rwsender
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el8
summary: SiLK Toolset: File Transfer Sender
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: b56baf156abe
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el8.src.rpm
location_href: x86_64/silk-rwsender-3.23.2-1_pysilk_snappy.el8.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-rwsender package contains a program (rwsender) which
  transmits files over the network to one or more rwreceiver programs.
  rwsender-rwreceiver pairs are used to move files from a machine
  running flowcap and one running rwflowpack, or from the rwflowpack
  machine to machine(s) running rwflowappend.


pkgId: 7d996c2da6b3da3809d61d858edab9d6f9f082a6364c7862057c44d95e3429eb
name: super_mediator
arch: x86_64
version: 1.11.2
epoch: 0
release: 0_silk.el8
summary: IPFIX Super Mediator for use with the YAF and SiLK tools
url: https://tools.netsa.cert.org/super_mediator/
rpm_license: GPLv2
rpm_group: Applications/System
rpm_buildhost: 581fd120dd96
rpm_sourcerpm: super_mediator-1.11.2-0_silk.el8.src.rpm
location_href: x86_64/super_mediator-1.11.2-0_silk.el8.x86_64.rpm
checksum_type: sha256
description:
  super_mediator is an IPFIX mediator for use with the YAF and SiLK tools.
  It collects and filters YAF output data to various IPFIX collecting processes
  and/or csv files. super_mediator can be configured to perform de-duplication
  of DNS resource records, SSL certificates, or HTTP header fields as exported
  by YAF.


pkgId: c2c4c178a6a3deb848df46176cb4f6c8a52c47c01ecafb0828566d3943eea115
name: yaf
arch: x86_64
version: 2.16.2
epoch: 0
release: 1.el8
summary: Yet Another Flow sensor
url: https://tools.netsa.cert.org/yaf2/
rpm_license: GPLv2
rpm_vendor: https://tools.netsa.cert.org/
rpm_group: Applications/System
rpm_buildhost: d07e8c53e2a7
rpm_sourcerpm: yaf-2.16.2-1.el8.src.rpm
location_href: x86_64/yaf-2.16.2-1.el8.x86_64.rpm
checksum_type: sha256
description:
  YAF is Yet Another Flow sensor. It processes packet data from pcap(3) dumpfiles
  as generated by tcpdump(1) or via live capture from an interface using pcap(3)
  or an Endace DAG card into bidirectional flows, then exports those flows to
  IPFIX Collecting Processes or in an IPFIX-based file format. YAF's output can
  be used with the SiLK tools, yafscii, and super_mediator.


