A program that uses xapian to index the flat file databases used by nfdump or flow-tools
☆36Mar 26, 2018Updated 8 years ago
Alternatives and similar repositories for netflow-indexer
Users that are interested in netflow-indexer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Plugin based information gathering library☆28May 8, 2026Updated 3 months ago
- Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files☆44May 9, 2024Updated 2 years ago
- dns logger for passive dns collection☆42May 27, 2012Updated 14 years ago
- ☆72Nov 17, 2021Updated 4 years ago
- integrating bro into yara☆33Dec 9, 2014Updated 11 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- BRO/Zeek IDS content pack contains pipeline rules, a stream, a dashboard displaying interesting activity, and a syslog tcp input to captu…☆19Apr 12, 2020Updated 6 years ago
- Meeting notes☆14Apr 5, 2016Updated 10 years ago
- Full packet capture with flow cutoff, rotation, and compression☆15Sep 18, 2018Updated 7 years ago
- some scripts for splunk☆52Jan 2, 2020Updated 6 years ago
- IDS Utility Belt For Automating/Testing Various Things☆29Oct 14, 2020Updated 5 years ago
- python wrapper for the nfdump cli application☆21Apr 8, 2021Updated 5 years ago
- DNS traffic indexer and analyzer☆26Oct 7, 2014Updated 11 years ago
- Analysis scripts for the Bro Intrusion Detection System☆59Feb 26, 2014Updated 12 years ago
- No elephant flows - flow shunting for Arista switches using EOS API☆27Apr 27, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Network timing evaluation used to detect beacons, works with argus flow as the source☆20May 4, 2016Updated 10 years ago
- Resolve URL or refering site based on alert or http log match in eve log output from suricata submit to Cuckoo as url task☆18Nov 7, 2016Updated 9 years ago
- A Python library for being a CND Batman....☆35Oct 29, 2015Updated 10 years ago
- Passive DNS collection using Zeek☆181Jun 2, 2023Updated 3 years ago
- Cyber Defence Monitoring Course Suite :: Suricata, Bro, Moloch☆61Feb 20, 2017Updated 9 years ago
- UI for forensic filtering of filesystem mac times.☆15May 14, 2020Updated 6 years ago
- DockerFiles for Docker Containers☆16Sep 2, 2017Updated 8 years ago
- IPFIXify reads ordinary text based log files, receives syslogs, parses Windows EventLogs, collects System Metrics, and more. Once collect…☆12Mar 6, 2018Updated 8 years ago
- Script for generating Bro intel files from pdf or html reports☆76Dec 7, 2015Updated 10 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.☆143Jul 28, 2026Updated 2 weeks ago
- Visualize your CRITs IOC's in Maltego☆12Jan 13, 2015Updated 11 years ago
- Compare multiple log formats against malware reputation lists.☆88Jul 27, 2017Updated 9 years ago
- Bro Intel Feed Linter☆26Aug 30, 2019Updated 6 years ago
- Network Scout (NS) is an extension to Artillery. NS allows you to access log files from multiple clients.☆21May 2, 2016Updated 10 years ago
- ☆14Sep 15, 2017Updated 8 years ago
- 200+ behavioral detection rules for Kunai (Linux eBPF). Covers MITRE ATT&CK with 92 techniques across execve, connect, DNS, file ops, ptr…☆21Mar 30, 2026Updated 4 months ago
- Snort/Suricata DAQ module with DPDK patch☆11Apr 10, 2024Updated 2 years ago
- Python script that gets IOC from MISP and converts it into BRO intel files.☆13Apr 17, 2016Updated 10 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Scripts for Bro IDS and ELK Stack☆56Sep 2, 2015Updated 10 years ago
- Zeek Junk Drawer - Just some scripts and a place to put them☆28Sep 22, 2020Updated 5 years ago
- Automated PAN Firewall Custom URL Category using Python and PAN API☆15Dec 16, 2015Updated 10 years ago
- A package manager for Zeek☆46Jul 29, 2026Updated 2 weeks ago
- Bro things..☆15Oct 23, 2015Updated 10 years ago
- scan-detection policies for bro☆16Jan 16, 2025Updated last year
- Detect Phishing with Bro IDS☆18Feb 1, 2017Updated 9 years ago