System for Internet-Level Knowledge 1.0.0 (Default branch) |
|
|
SiLK (System for Internet-Level Knowledge)
consists of two sets of tools: a packing system
and an analysis suite. The packing system receives
Netflow V5 PDUs and converts them into a more
space efficient format, recording the packed
records into service-specific binary flat files.
The analysis suite consists of tools that can read
these flat files and then perform various query
operations, ranging from per-record filtering to
statistical analysis of groups of records. The
analysis tools interoperate using pipes, allowing
a user to develop a relatively sophisticated query
from a simple beginning.
License: GNU General Public License (GPL)
Changes:
This version provides integration with Python 2.4
or later, and rwfilter can now filter based on
Python expressions. Preliminary support for IPv6
addresses can be included. rwfilter now supports
threads. Arbitrary notes (annotations) can be
added to the headers of some SiLK files. Site
information is completely determined at run-time.
Many other enhancements and bugfixes were made.
Note that a few deprecated options and behaviors
have been removed.
|
