# packages

pkgId: a51514e6e8208a2240802c2edd235cff1113f2481be6cc592064ca45920a4cce
name: fixbuf-tools
arch: src
version: 4.0.4
epoch: 0
release: 1.el10
summary: Command line tools to convert IPFIX files to JSON or text
url: https://tools.netsa.cert.org/fixbuf-tools/
rpm_license: GPLv2
rpm_vendor: CERT NetSA at Carnegie Mellon SEI
rpm_group: Applications/System
rpm_buildhost: 97c035eb95b7
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: fixbuf-tools-4.0.4-1.el10.src.rpm
checksum_type: sha256
description:
  fixbuf-tools contains two command-line tools for processing IPFIX files:
  ipfix2json reads an IPFIX file and produces JSON; ipfixDump creates a
  human-readable representation of the contents of an IPFIX file.


pkgId: 0c8a00ea1758da46c8282141af3a7d95573a5132cffe9f95337f6d5bb87b85c4
name: libfixbuf
arch: src
version: 2.5.4
epoch: 0
release: 1_openssl.el10
summary: Fixbuf IPFIX implementation library
url: https://tools.netsa.cert.org/fixbuf2/
rpm_license: LGPLv3
rpm_vendor: CERT NetSA at Carnegie Mellon SEI
rpm_group: Applications/System
rpm_buildhost: 1c12e25639a1
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: libfixbuf-2.5.4-1_openssl.el10.src.rpm
checksum_type: sha256
description:
  libfixbuf aims to be a compliant implementation of the IPFIX Protocol
  and message format, from which IPFIX Collecting Processes and
  IPFIX Exporting Processes may be built.


pkgId: 585712012f8da8a4bd17614912a632a3bcefbbd767f161cffaa9268a1d0cc1c2
name: silk
arch: src
version: 3.24.2
epoch: 0
release: 1_pysilk_maxmind_snappy.el10
summary: SiLK: A network flow collection and analysis package
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: 9ea2824c7296
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: silk-3.24.2-1_pysilk_maxmind_snappy.el10.src.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  SiLK consists of two sets of tools: a packing system and analysis
  suite. The packing system receives network flow information from
  Netflow v5 or any IPFIX-based flowmeter and converts them into a more
  space efficient format, recording the packed records into
  service-specific, binary flat files. The analysis suite consists of
  tools which can read these flat files and then perform various query
  operations, ranging from per-record filtering to statistical analysis
  of groups of records. The analysis tools interoperate using pipes,
  allowing a user to develop a relatively sophisticated query from a
  simple beginning.


pkgId: f49ab0f0ff7718a78f6aef2b66ec5f472a23cc970d149f807f8d3750de3ba801
name: super_mediator
arch: src
version: 1.13.2
epoch: 0
release: 1_silk.el10
summary: IPFIX Super Mediator for use with the YAF and SiLK tools
url: https://tools.netsa.cert.org/super_mediator/
rpm_license: GPLv2
rpm_group: Applications/System
rpm_buildhost: df6f82632b6f
location_href: super_mediator-1.13.2-1_silk.el10.src.rpm
checksum_type: sha256
description:
  super_mediator is an IPFIX mediator for use with the YAF and SiLK tools.
  It collects and filters YAF output data to various IPFIX collecting processes
  and/or csv files. super_mediator can be configured to perform de-duplication
  of DNS resource records, SSL certificates, or HTTP header fields as exported
  by YAF.


pkgId: 7a5a3f6001f3c8069630af39eb8145f4bf3ea66713fe6c5ccbfe81479acfbb3e
name: yaf
arch: src
version: 2.19.3
epoch: 0
release: 1.el10
summary: Yet Another Flow sensor
url: https://tools.netsa.cert.org/yaf2/
rpm_license: GPLv2
rpm_vendor: https://tools.netsa.cert.org/
rpm_group: Applications/System
rpm_buildhost: 53a6b82637f3
location_href: yaf-2.19.3-1.el10.src.rpm
checksum_type: sha256
description:
  YAF is Yet Another Flow sensor. It processes packet data from pcap(3) dumpfiles
  as generated by tcpdump(1) or via live capture from an interface using pcap(3)
  or an Endace DAG card into bidirectional flows, then exports those flows to
  IPFIX Collecting Processes or in an IPFIX-based file format. YAF's output can
  be used with the SiLK tools, yafscii, and super_mediator.


