# packages

pkgId: 6e53c53e9513675a8f8c4d7489b7156b471a57247d16ac101d2c109958373259
name: fixbuf-tools
arch: src
version: 4.0.1
epoch: 0
release: 1.el9
summary: Command line tools to convert IPFIX files to JSON or text
url: https://tools.netsa.cert.org/fixbuf-tools/
rpm_license: GPLv2
rpm_vendor: CERT NetSA at Carnegie Mellon SEI
rpm_group: Applications/System
rpm_buildhost: 677cafd1c689
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: fixbuf-tools-4.0.1-1.el9.src.rpm
checksum_type: sha256
description:
  fixbuf-tools contains two command-line tools for processing IPFIX files:
  ipfix2json reads an IPFIX file and produces JSON; ipfixDump creates a
  human-readable representation of the contents of an IPFIX file.


pkgId: 01d971db6cd6fd3ea26a6e30cfb4f9cfe73274f7f1319dcc0c19c720b04f72c1
name: libfixbuf
arch: src
version: 2.5.1
epoch: 0
release: 1_openssl.el9
summary: Fixbuf IPFIX implementation library
url: https://tools.netsa.cert.org/fixbuf2/
rpm_license: LGPLv3
rpm_vendor: CERT NetSA at Carnegie Mellon SEI
rpm_group: Applications/System
rpm_buildhost: 04fcbd855fe5
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: libfixbuf-2.5.1-1_openssl.el9.src.rpm
checksum_type: sha256
description:
  libfixbuf aims to be a compliant implementation of the IPFIX Protocol
  and message format, from which IPFIX Collecting Processes and
  IPFIX Exporting Processes may be built.


pkgId: efcc97e290a5b0732f5a0d3d9ab8f11a4f27e2f97132779e6fc5f1ba610ffb36
name: silk
arch: src
version: 3.23.2
epoch: 0
release: 1_pysilk_snappy.el9
summary: SiLK: A network flow collection and analysis package
url: https://tools.netsa.cert.org/silk/
rpm_license: GPLv2
rpm_vendor: CERT Network Situational Awareness <netsa-help@cert.org>
rpm_group: Applications/System
rpm_buildhost: 9f4cc5c3f306
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: silk-3.23.2-1_pysilk_snappy.el9.src.rpm
checksum_type: sha256
description:
  SiLK, the System for Internet-Level Knowledge, is a collection of
  traffic analysis tools developed by the CERT Network Situational
  Awareness Team (CERT NetSA) to facilitate security analysis of large
  networks. The SiLK tool suite supports the efficient collection,
  storage and analysis of network flow data, enabling network security
  analysts to rapidly query large historical traffic data sets. SiLK is
  ideally suited for analyzing traffic on the backbone or border of a
  large, distributed enterprise or mid-sized ISP.

  SiLK consists of two sets of tools: a packing system and analysis
  suite. The packing system receives network flow information from
  Netflow v5 or any IPFIX-based flowmeter and converts them into a more
  space efficient format, recording the packed records into
  service-specific, binary flat files. The analysis suite consists of
  tools which can read these flat files and then perform various query
  operations, ranging from per-record filtering to statistical analysis
  of groups of records. The analysis tools interoperate using pipes,
  allowing a user to develop a relatively sophisticated query from a
  simple beginning.


pkgId: 93448393b4ffb5265ec7f65f3e0dcdc6bc3011a92b40801f66b66d32d2d74576
name: super_mediator
arch: src
version: 1.11.2
epoch: 0
release: 0_silk.el9
summary: IPFIX Super Mediator for use with the YAF and SiLK tools
url: https://tools.netsa.cert.org/super_mediator/
rpm_license: GPLv2
rpm_vendor: CERT NetSA at Carnegie Mellon SEI
rpm_group: Applications/System
rpm_buildhost: eb737557745e
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: super_mediator-1.11.2-0_silk.el9.src.rpm
checksum_type: sha256
description:
  super_mediator is an IPFIX mediator for use with the YAF and SiLK tools.
  It collects and filters YAF output data to various IPFIX collecting processes
  and/or csv files. super_mediator can be configured to perform de-duplication
  of DNS resource records, SSL certificates, or HTTP header fields as exported
  by YAF.


pkgId: 87c7062ca2e09f4918926f2113f5301a26132d62ac0d5e68c10496bbe2f5f856
name: yaf
arch: src
version: 2.16.2
epoch: 0
release: 1.el9
summary: Yet Another Flow sensor
url: https://tools.netsa.cert.org/yaf2/
rpm_license: GPLv2
rpm_vendor: https://tools.netsa.cert.org/
rpm_group: Applications/System
rpm_buildhost: c1d91d3edbdb
rpm_packager: Katherine Prevost <prevost1@cert.org>
location_href: yaf-2.16.2-1.el9.src.rpm
checksum_type: sha256
description:
  YAF is Yet Another Flow sensor. It processes packet data from pcap(3) dumpfiles
  as generated by tcpdump(1) or via live capture from an interface using pcap(3)
  or an Endace DAG card into bidirectional flows, then exports those flows to
  IPFIX Collecting Processes or in an IPFIX-based file format. YAF's output can
  be used with the SiLK tools, yafscii, and super_mediator.


