# packages

pkgId: 88c1a5d95973a79402c7eb6bb97442a6bc6a465512e5bd387b061cb5a0450ad5
name: fixbuf-tools
arch: x86_64
version: 4.0.1
epoch: 0
release: 1.el9
summary: Command line tools to convert IPFIX files to JSON or text
url: https://tools.netsa.cert.org/fixbuf-tools/
rpm_license: GPLv2
rpm_vendor: CERT NetSA at Carnegie Mellon SEI
rpm_group: Applications/System
rpm_buildhost: 677cafd1c689
rpm_sourcerpm: fixbuf-tools-4.0.1-1.el9.src.rpm
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: x86_64/fixbuf-tools-4.0.1-1.el9.x86_64.rpm
checksum_type: sha256
description:
  fixbuf-tools contains two command-line tools for processing IPFIX files:
  ipfix2json reads an IPFIX file and produces JSON; ipfixDump creates a
  human-readable representation of the contents of an IPFIX file.


pkgId: d841c346497970390eae120cce728d46126608d47fd149dc38bdd1d6c7c1cc8f
name: libfixbuf
arch: x86_64
version: 2.5.1
epoch: 0
release: 1_openssl.el9
summary: Fixbuf IPFIX implementation library
url: https://tools.netsa.cert.org/fixbuf2/
rpm_license: LGPLv3
rpm_vendor: CERT NetSA at Carnegie Mellon SEI
rpm_group: Applications/System
rpm_buildhost: 04fcbd855fe5
rpm_sourcerpm: libfixbuf-2.5.1-1_openssl.el9.src.rpm
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: x86_64/libfixbuf-2.5.1-1_openssl.el9.x86_64.rpm
checksum_type: sha256
description:
  libfixbuf aims to be a compliant implementation of the IPFIX Protocol
  and message format, from which IPFIX Collecting Processes and
  IPFIX Exporting Processes may be built.


pkgId: 8d4f9130023498c3c1a23870dec573153aef0b9524f79d145febc943792acd47
name: libfixbuf-devel
arch: x86_64
version: 2.5.1
epoch: 0
release: 1_openssl.el9
summary: Unversioned shared libraries and C header files for libfixbuf
url: https://tools.netsa.cert.org/fixbuf2/
rpm_license: LGPLv3
rpm_vendor: CERT NetSA at Carnegie Mellon SEI
rpm_group: Applications/System
rpm_buildhost: 04fcbd855fe5
rpm_sourcerpm: libfixbuf-2.5.1-1_openssl.el9.src.rpm
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: x86_64/libfixbuf-devel-2.5.1-1_openssl.el9.x86_64.rpm
checksum_type: sha256
description:
  Unversioned shared libraries and C header files for libfixbuf. Also includes
  HTML documentation of the library API calls.


pkgId: 7cd095747b7449a88451b7bf469f8a67a1bb3de8716f442b5c61fb1f762aac3f
name: silk-analysis
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el9
summary: SiLK Toolset: The Analysis Suite
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: 9f4cc5c3f306
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el9.src.rpm
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: x86_64/silk-analysis-3.23.2-1_pysilk_snappy.el9.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-analysis package contains the analysis tools that query the
  SiLK Flow data collected by rwflowpack (contained in the
  silk-rwflowpack package) and summarize that data in various ways.


pkgId: 58ba903c90d3b3ebe8026ec1409455ade385a4649445a84fa5aa2e69184fc27c
name: silk-common
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el9
summary: SiLK Toolset: Common Libraries and Configuration Files
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: 9f4cc5c3f306
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el9.src.rpm
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: x86_64/silk-common-3.23.2-1_pysilk_snappy.el9.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-common package contains the libraries and configuration files
  required by the other parts of SiLK Toolset, as well as generally
  useful utilities.


pkgId: 553b140ea71a734b922a36483ab5fc4c7fe55ba82d0ee459295c3b99aebeacc7
name: silk-devel
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el9
summary: The SiLK Toolset development files
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Development/Libraries
rpm_buildhost: 9f4cc5c3f306
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el9.src.rpm
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: x86_64/silk-devel-3.23.2-1_pysilk_snappy.el9.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-devel package contains the development libraries and headers
  for SiLK.  This package is required to build additional applications
  or to build shared libraries for use as plug-ins to the SiLK analysis
  tools.


pkgId: aad464118881516b6a4a67dab9f1af0783c8fc286927e1966b9720324871b104
name: silk-flowcap
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el9
summary: SiLK Toolset: Remote Flow Collection
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: 9f4cc5c3f306
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el9.src.rpm
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: x86_64/silk-flowcap-3.23.2-1_pysilk_snappy.el9.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-flowcap package contains flowcap, a daemon to capture NetFlow
  v5 or IPFIX flows (Internet Protocol Flow Information eXport), to
  store the data temporarily in files on its local disk, and to forward
  these files over the network to a machine where rwflowpack processes
  the data.  flowcap is typically used with an rwsender-rwreceiver pair
  to move the files across the network.


pkgId: e8de1055b06e2f152bf59ee9c2162d2971769d2f7d0464816b48b4df1003ec60
name: silk-rwflowappend
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el9
summary: SiLK Toolset: Remote Data Storage Appending Daemon
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: 9f4cc5c3f306
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el9.src.rpm
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: x86_64/silk-rwflowappend-3.23.2-1_pysilk_snappy.el9.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-rwflowappend package is used when the final storage location
  of SiLK data files is on a different machine than that where the files
  are created by the rwflowpack daemon (see the silk-rwflowpack
  package).  rwflowappend watches a directory for SiLK data files and
  appends those files to the final storage location where the SiLK
  analysis tools (from the silk-analysis package) can process them.  To
  move the files from rwflowpack to rwflowappend, an rwsender-rwreceiver
  pair is typically used.


pkgId: 75ca5998e37163168c4a13ff050f8c154632957d3f9a6690d3a0bc36576a9b33
name: silk-rwflowpack
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el9
summary: SiLK Toolset: The Packer
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: 9f4cc5c3f306
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el9.src.rpm
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: x86_64/silk-rwflowpack-3.23.2-1_pysilk_snappy.el9.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-rwflowpack package converts NetFlow v5 or IPFIX (Internet
  Protocol Flow Information eXport) data to the SiLK Flow record format,
  categorizes each flow (e.g., as incoming or outgoing), and stores the
  data in binary flat files within a directory tree, with one file per
  hour-category-sensor tuple.  Use the tools from the silk-analysis
  package to query this data.  rwflowpack may capture the data itself,
  or it may process files that have been created by flowcap (see the
  silk-flowcap package).


pkgId: 2103964bffc43ba14451ca9afd1ef3362e5868c603be7e2694a220567c15d397
name: silk-rwpollexec
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el9
summary: SiLK Toolset: Batch Command Executor
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: 9f4cc5c3f306
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el9.src.rpm
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: x86_64/silk-rwpollexec-3.23.2-1_pysilk_snappy.el9.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-rwpollexec package contains a program (rwpollexec) which
  monitors a directory for incoming files.  For each file, rwpollexec
  executes a user-specified command.  If the command completes
  successfully, the file is either moved to an archive directory or
  deleted.


pkgId: 85d18aee2dfa6c5ea5e8f785ee57ac7186ed38bb434579668288832b2539b126
name: silk-rwreceiver
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el9
summary: SiLK Toolset: File Transfer Receiver
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: 9f4cc5c3f306
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el9.src.rpm
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: x86_64/silk-rwreceiver-3.23.2-1_pysilk_snappy.el9.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-rwreceiver package contains a program (rwreceiver) which
  receives files over the network from one or more rwsender programs.
  rwsender-rwreceiver pairs are used to move files from a machine
  running flowcap and one running rwflowpack, or from the rwflowpack
  machine to machine(s) running rwflowappend.


pkgId: c14076ea73bcac474057167b3147d8e5b40bf5d77a6122a118b4bf0c5eb83048
name: silk-rwsender
arch: x86_64
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el9
summary: SiLK Toolset: File Transfer Sender
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: 9f4cc5c3f306
rpm_sourcerpm: silk-3.23.2-1_pysilk_snappy.el9.src.rpm
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: x86_64/silk-rwsender-3.23.2-1_pysilk_snappy.el9.x86_64.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  The silk-rwsender package contains a program (rwsender) which
  transmits files over the network to one or more rwreceiver programs.
  rwsender-rwreceiver pairs are used to move files from a machine
  running flowcap and one running rwflowpack, or from the rwflowpack
  machine to machine(s) running rwflowappend.


pkgId: 22ddb07efc674092b2176bb920dd88f7fc58d3e7c46fda2e0153df49ffcbe6b9
name: super_mediator
arch: x86_64
version: 1.11.2
epoch: 0
release: 0_silk.el9
summary: IPFIX Super Mediator for use with the YAF and SiLK tools
url: https://tools.netsa.cert.org/super_mediator/
rpm_license: GPLv2
rpm_vendor: CERT NetSA at Carnegie Mellon SEI
rpm_group: Applications/System
rpm_buildhost: eb737557745e
rpm_sourcerpm: super_mediator-1.11.2-0_silk.el9.src.rpm
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: x86_64/super_mediator-1.11.2-0_silk.el9.x86_64.rpm
checksum_type: sha256
description:
  super_mediator is an IPFIX mediator for use with the YAF and SiLK tools.
  It collects and filters YAF output data to various IPFIX collecting processes
  and/or csv files. super_mediator can be configured to perform de-duplication
  of DNS resource records, SSL certificates, or HTTP header fields as exported
  by YAF.


pkgId: 4fd67a1091eabbb3df4277a5ffc1b00f86fd1a79d96f11f692c27721989158d8
name: yaf
arch: x86_64
version: 2.16.2
epoch: 0
release: 1.el9
summary: Yet Another Flow sensor
url: https://tools.netsa.cert.org/yaf2/
rpm_license: GPLv2
rpm_vendor: https://tools.netsa.cert.org/
rpm_group: Applications/System
rpm_buildhost: c1d91d3edbdb
rpm_sourcerpm: yaf-2.16.2-1.el9.src.rpm
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: x86_64/yaf-2.16.2-1.el9.x86_64.rpm
checksum_type: sha256
description:
  YAF is Yet Another Flow sensor. It processes packet data from pcap(3) dumpfiles
  as generated by tcpdump(1) or via live capture from an interface using pcap(3)
  or an Endace DAG card into bidirectional flows, then exports those flows to
  IPFIX Collecting Processes or in an IPFIX-based file format. YAF's output can
  be used with the SiLK tools, yafscii, and super_mediator.


