# packages

pkgId: 5247fc7d7881b73a5eddd7e7dae6d7c0a6cefe2e1d8987bcddb596711d5e4605
name: fixbuf-tools
arch: src
version: 4.0.1
epoch: 0
release: 1.el8
summary: Command line tools to convert IPFIX files to JSON or text
url: https://tools.netsa.cert.org/fixbuf-tools/
rpm_license: GPLv2
rpm_group: Applications/System
rpm_buildhost: 734f6aa5979b
location_href: fixbuf-tools-4.0.1-1.el8.src.rpm
checksum_type: sha256
description:
  fixbuf-tools contains two command-line tools for processing IPFIX files:
  ipfix2json reads an IPFIX file and produces JSON; ipfixDump creates a
  human-readable representation of the contents of an IPFIX file.


pkgId: a69b099b6123bb37b4a2ef91ed03dd283272442da7ff9c4450a78085bfa00779
name: libfixbuf
arch: src
version: 2.5.1
epoch: 0
release: 1_openssl.el8
summary: Fixbuf IPFIX implementation library
url: https://tools.netsa.cert.org/fixbuf2/
rpm_license: LGPLv3
rpm_group: Applications/System
rpm_buildhost: 0e090dccb4f6
location_href: libfixbuf-2.5.1-1_openssl.el8.src.rpm
checksum_type: sha256
description:
  libfixbuf aims to be a compliant implementation of the IPFIX Protocol
  and message format, from which IPFIX Collecting Processes and
  IPFIX Exporting Processes may be built.


pkgId: 00db2c2cf649ba09f750f743c01adccbc50163215c563b63575e43cf940e7bd2
name: silk
arch: src
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el8
summary: SiLK: A network flow collection and analysis package
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: b56baf156abe
location_href: silk-3.23.2-1_pysilk_snappy.el8.src.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  SiLK consists of two sets of tools: a packing system and analysis
  suite. The packing system receives network flow information from
  Netflow v5 or any IPFIX-based flowmeter and converts them into a more
  space efficient format, recording the packed records into
  service-specific, binary flat files. The analysis suite consists of
  tools which can read these flat files and then perform various query
  operations, ranging from per-record filtering to statistical analysis
  of groups of records. The analysis tools interoperate using pipes,
  allowing a user to develop a relatively sophisticated query from a
  simple beginning.


pkgId: 593bc2367b192a657eab37750cb192956410e419b7c994bb3537bf6457841190
name: super_mediator
arch: src
version: 1.11.2
epoch: 0
release: 0_silk.el8
summary: IPFIX Super Mediator for use with the YAF and SiLK tools
url: https://tools.netsa.cert.org/super_mediator/
rpm_license: GPLv2
rpm_group: Applications/System
rpm_buildhost: 581fd120dd96
location_href: super_mediator-1.11.2-0_silk.el8.src.rpm
checksum_type: sha256
description:
  super_mediator is an IPFIX mediator for use with the YAF and SiLK tools.
  It collects and filters YAF output data to various IPFIX collecting processes
  and/or csv files. super_mediator can be configured to perform de-duplication
  of DNS resource records, SSL certificates, or HTTP header fields as exported
  by YAF.


pkgId: ed66e2c46e1aa53ea6b40de54cd2e57c2b1d2ddf2f5c0c890b1e4b53ef4e69e3
name: yaf
arch: src
version: 2.16.2
epoch: 0
release: 1.el8
summary: Yet Another Flow sensor
url: https://tools.netsa.cert.org/yaf2/
rpm_license: GPLv2
rpm_vendor: https://tools.netsa.cert.org/
rpm_group: Applications/System
rpm_buildhost: d07e8c53e2a7
location_href: yaf-2.16.2-1.el8.src.rpm
checksum_type: sha256
description:
  YAF is Yet Another Flow sensor. It processes packet data from pcap(3) dumpfiles
  as generated by tcpdump(1) or via live capture from an interface using pcap(3)
  or an Endace DAG card into bidirectional flows, then exports those flows to
  IPFIX Collecting Processes or in an IPFIX-based file format. YAF's output can
  be used with the SiLK tools, yafscii, and super_mediator.


