JustinAzoff / netflow-indexer
A program that uses xapian to index the flat file databases used by nfdump or flow-tools
☆36Updated 6 years ago
Alternatives and similar repositories for netflow-indexer:
Users that are interested in netflow-indexer are comparing it to the libraries listed below
- Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files☆44Updated 10 months ago
- Python client for the whois.cymru.com service☆44Updated 8 years ago
- Hakabana monitoring tool using Haka, ElastcSearch and Kibana☆20Updated 10 years ago
- Time-Machine Dynamic Bulk Packet Recorder☆36Updated last year
- scan-detection policies for bro☆15Updated 2 months ago
- Email Abuse - A Versatile Software for Email review, analysis and reporting☆21Updated 9 years ago
- Bro-IDS scripts☆50Updated 8 years ago
- ☆24Updated 5 years ago
- Python bindings to libhtp☆30Updated 4 years ago
- Generates visualizations from the output of flow tools such as SiLK.☆35Updated 8 years ago
- Traceroute improved wrapper for CSIRT and CERT operators☆37Updated 5 months ago
- python wrapper for the nfdump cli application☆21Updated 3 years ago
- Meer (GPLv2) is a dedicated "spooler" for the Suricata & Sagan EVE output formats.☆23Updated 4 years ago
- brocon-15 scripts☆13Updated 7 years ago
- This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.☆47Updated 11 years ago
- Broctl plugin for automatically executing 'setcap' on each node after an install☆13Updated 4 years ago
- ☆14Updated 11 months ago
- OpenDNS Graph Miner☆45Updated 7 years ago
- BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN).☆106Updated last year
- Logging plugin to bro to send logs to a Kafka broker☆20Updated 7 years ago
- Bro Snippets☆21Updated 10 years ago
- module for osquery to load Bro logs into tables☆28Updated 9 years ago
- Lightweight DNS telemetry☆54Updated 3 years ago
- Passive DNS V2☆62Updated 10 years ago
- A Docker container for Moloch based on minimal Debian☆26Updated 9 years ago
- Honeypot log processor to create OTX Pulse entries☆29Updated last year
- Network timing evaluation used to detect beacons, works with argus flow as the source☆20Updated 8 years ago
- vagrant multi-machine: Moloch, Bro,Suricata,ElasticSearch,Kibana☆41Updated 10 years ago
- ☆23Updated 4 years ago
- IDS Utility Belt For Automating/Testing Various Things☆30Updated 4 years ago