System for Internet-Level Knowledge 2.4.5

A project is a collection of traffic analysis tools

  Add it to your Download Basket!

 Add it to your Watch List!


Rate it!

What's new in System for Internet-Level Knowledge 2.4.5:

  • Better handling of missing Netflow V5 records.
Read full changelog
send us
an update
GPL (GNU General Public License) 
3.9/5 17
CERT Network Situational Awareness
ROOT \ System \ Logging
System for Internet-Level Knowledge (SiLK) project is a collection of traffic analysis tools developed by the CERT Network Situational Awareness Team (CERT NetSA) to facilitate security analysis of large networks.

The SiLK tool suite supports the efficient collection, storage and analysis of network flow data, enabling network security analysts to rapidly query large historical traffic data sets. SiLK is ideally suited for analyzing traffic on the backbone or border of a large, distributed enterprise or mid-sized ISP.

SiLK consists of two sets of tools: a packing system and analysis suite. The packing system receives Netflow V5 PDU's and converts them into a more space efficient format, recording the packed records into service-specific binary flat files. The analysis suite consists of tools which can read these flat files and then perform various query operations, ranging from per-record filtering to statistical analysis of groups of records. The analysis tools interoperate using pipes, allowing a user to develop a relatively sophisticated query from a simple beginning.

The vast majority of the current code-base is implemented in C, Perl, or Python. This code has been tested on Linux, Solaris, OpenBSD, and Mac OS X, but should be usable with little or no change on other Unix platforms.

System for Internet-Level Knowledge software components are released under the GPL.

Last updated on March 1st, 2011

#Internet-Level Knowledge #traffic analysis #traffic logging #Internet-Level #Knowledge #traffic #analysis

Add your review!